intelligence_src_a80a0f9d7d107ab9e4
- Source-provided label
- Publisher RSS metadata
- Evidence class
- mentioned in report
- Confidence
- Not reported
- Observed
- Mar 31, 2026 17:48 UTC
- Retrieved
- Oct 13, 2026 01:46 UTC
v1.6.1
Changes from v1.6.0 to v1.6.1 total: 62 commits, prs: 34 pr commits: 62 Upgrade notes No upgrade note for that patch release. Bugfixes [v1.6] Fix memory leaks in process and event caches (#4257) by @mtardy fix(pkg/sensors): fixed kretprobe args merge helper (#4505) by @FedeDP [v1.6 backport] bpf: make op_capabilities_gained filter consistent (#4564) by @andrewstrohman fix(pkg/sensors): cgtrackermap size for uprobe, lsm and usdt sensors (#4586) by @FedeDP fix(process/cache): balance parent refcount ops during LRU eviction (1.6) (#4689) by @dwindsor Update default tetragon-rthooks image tag from v0.5 to v0.8. (#4768) by @will-isovalent tetragon: policies can now be loaded even if kptr_restrict is equal to 2 (#4776) by @FedeDP helm: Handle tetragon.enabled value properly (#4292) by @michi-covalent uprobe: support match args (#4319) by @andrewstrohman [backport/v1.6] Add umode_t in validation (#4338) by @tpapagian uprobes: allow using BTF resolve (#4380) by @andrewstrohman various v1.6 backports 20260219 (#4669) by @kkourt [v1.6] new(bpf,pkg,docs): use tracefs instead of debugfs (#4754) by @FedeDP [backport/v1.6] helm: fix rthooks container resources not being applied (#4775) by @tpapagian bug: Avoid overwritten slogLeveler (#4300) by @sayboras Fixed NotEqual operator for integer matchArgs with multiple values (#4727) by @AritraDey-Dev process: improve exec refcounting (#4473) by @kevsecurity CI changes Makefile: update buf breaking change check to v1.6 branch (#4801) by @dangome3 fixes backports (#4318) by @olsajiri [v1.6] tetragon: Fix TestMatchBinariesFollowChildrenUpdate test (#4514) by @olsajiri [v1.6] Revert "ci: Fix package e2e tests GHA" (#4695) by @andrewstrohman Backports/kevsecurity/v1.6/improve ring reliability in tests (#4268) by @kevsecurity Backports/v1.6: tetragon: Limit sys_close events in test (#4271) by @kevsecurity Makefile: don't rely on PWD (#4782) by @dangome3 Dependency updates fix(deps): update module github.com/cilium/ebpf to v0.20.0 (#4688) by @sayboras fix(deps): update module github.com/containerd/containerd to v1.7.29 [security] (v1.6) (#4305) by @cilium-renovate[bot] chore(deps): update docker.io/library/alpine docker tag to v3.23.0 (v1.6) (#4413) by @cilium-renovate[bot] chore(deps): update docker.io/library/alpine docker tag to v3.23.2 (v1.6) (#4453) by @cilium-renovate[bot] chore(deps): update docker.io/library/alpine docker tag to v3.23.3 (v1.6) (#4592) by @cilium-renovate[bot] chore(deps): update module golang.org/x/net to v0.45.0 [security] (v1.6) (#4614) by @cilium-renovate[bot] chore(deps): update go to v1.25.8 (v1.6) (patch) (#4793) by @cilium-renovate[bot] fix(deps): update module google.golang.org/grpc to v1.79.3 [security] (v1.6) (#4773) by @cilium-renovate[bot] Full Changelog: v1.6.0...v1.6.1
Reference details
- Source category
- research-report
- First reported
- Mar 31, 2026 17:48 UTC
- Last reported
- Mar 31, 2026 17:48 UTC
- Catalog updated
- Oct 13, 2026 01:46 UTC
- Record ID
e22b0cfc4fe9c814bcac4b560b0d4c28c321bedb63aab9a62dd8567ad4853498
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
Source observations
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.
Review source update dates and status
- intelligence_src_a80a0f9d7d107ab9e4Recent successful batchLast successful batch: Last attempt:
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.