<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Linux Agent</title><link>https://docs.sysdig.com/en/release-notes/linux-agent-release-notes/</link><description>Recent content on Linux Agent</description><language>en</language><lastBuildDate>Fri, 10 Jul 2026 17:39:55 +0200</lastBuildDate><image><url> https://docs.sysdig.com/icons/sysdig-horizontal.png</url><title>Linux Agent</title><link>https://docs.sysdig.com/en/release-notes/linux-agent-release-notes/</link><description>Sysdig logo</description></image><item><title>Linux Agent - 13.9.0 May 1, 2025</title><link>https://docs.sysdig.com/en/release-notes/linux-agent-release-notes/#13.9.0-may-1-2025</link><description>See Linux Host Shield Release Notes</description><content:encoded>&lt;p>See &lt;a href="/en/release-notes/linux-host-shield-release-notes/#1390-may-1-2025">Linux Host Shield Release Notes&lt;/a>&lt;/p></content:encoded><guid isPermaLink="false">13.9.0 May 1, 2025</guid></item><item><title>Linux Agent - 13.8.1 March 25, 2025</title><link>https://docs.sysdig.com/en/release-notes/linux-agent-release-notes/#13.8.1-march-25-2025</link><description>Added support for SASL/PLAIN and SASL/SCRAM authentication for Kafka. See Event Forwarding to Kafka</description><content:encoded><![CDATA[<ul>

<li>Supported <code>sysdig-deploy</code> version: 1.78.7</li>

<li>Supported Falco Engine version: 1000.39.0</li>

<li>Supported Shield: <code>1.0.0</code></li>
</ul>


<h3 id="enhancements">Enhancements</h3>
<h4 id="agent-local-forwarding">Agent Local Forwarding</h4>
<p>Added support for SASL/PLAIN and SASL/SCRAM authentication for Kafka. See <a href="/en/forward-kafka/">Event Forwarding to Kafka</a></p>

<h3 id="vulnerability-fixes">Vulnerability Fixes</h3>
<p>This release addresses the following security vulnerabilities:</p>

<ul>

<li><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-56171">CVE-2024-56171</a></li>

<li><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-22868">CVE-2025-22868</a></li>

<li><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-22869">CVE-2025-22869</a></li>

<li><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-22870">CVE-2025-22870</a></li>

<li><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-24928">CVE-2025-24928</a></li>
</ul>


<h3 id="defect-fixes">Defect Fixes</h3>
<h4 id="fixed-jq-error-messages-in-standard-output">Fixed jq Error Messages in Standard Output</h4>
<p>Fixed an issue causing <code>jq</code> errors being printed on <code>stderr</code>.</p>]]></content:encoded><guid isPermaLink="false">13.8.1 March 25, 2025</guid></item><item><title>Linux Agent - 13.8.0 February 20, 2025</title><link>https://docs.sysdig.com/en/release-notes/linux-agent-release-notes/#13.8.0-february-20-2025</link><description>Added kube_hpa_status_condition metric to provide visibility into the status conditions of Kubernetes Horizontal Pod Autoscalers (HPA). This helps you to track scaling decisions and overall HPA health.</description><content:encoded><![CDATA[<ul>

<li>Supported <code>sysdig-deploy</code> version: 1.77.0</li>

<li>Supported Falco Engine version: 1000.39.0</li>
</ul>


<h3 id="enhancements-1">Enhancements</h3>
<h4 id="improved-monitoring-for-horizontal-pod-autoscalers">Improved Monitoring for Horizontal Pod Autoscalers</h4>
<p>Added <code>kube_hpa_status_condition</code> metric to provide visibility into the status conditions of Kubernetes Horizontal Pod Autoscalers (HPA).
This helps you to track scaling decisions and overall HPA health.</p>

<h4 id="new-configuration-option-for-remote-filesystem-statistics">New Configuration Option for Remote Filesystem Statistics</h4>
<p>The new configuration option in the  Linux Agent: <code>remotefs_stats.enabled</code> controls whether filesystem operation and traffic statistics are collected for each mount entry. By default, it is set to <code>true</code>.
Additionally, the Agent now limits the collection of these statistics exclusively to remote mount points, ensuring more targeted data reporting.</p>

<h4 id="collector-connection-configuration-added-to-host-shield">Collector Connection Configuration Added to Host Shield</h4>
<p>You can now specify the connection information for the Sysdig collector in the <code>host-shield.yaml</code> file as follows:</p>
<div class="highlight">
<pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml"><span class="line"><span class="cl"><span class="nt">sysdig_endpoint</span><span class="p">:</span><span class="w">
</span></span></span><span class="line"><span class="cl"><span class="w">  </span><span class="nt">collector</span><span class="p">:</span><span class="w">
</span></span></span><span class="line"><span class="cl"><span class="w">    </span><span class="nt">host</span><span class="p">:</span><span class="w"> </span><span class="l">&lt;host&gt;</span><span class="w">
</span></span></span><span class="line"><span class="cl"><span class="w">    </span><span class="nt">port</span><span class="p">:</span><span class="w"> </span><span class="l">&lt;port&gt;</span><span class="w">
</span></span></span></code></pre></div>
<h3 id="vulnerability-fixes-1">Vulnerability Fixes</h3>
<p>This release addresses the following security vulnerabilities:</p>

<ul>

<li><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-45341">CVE-2024-45341</a></li>

<li><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-45336">CVE-2024-45336</a></li>

<li><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-12797">CVE-2024-12797</a></li>

<li><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-49043">CVE-2022-49043</a></li>

<li><a href="https://nvd.nist.gov/vuln/detail/CVE-2020-11023">CVE-2020-11023</a></li>

<li><a href="https://nvd.nist.gov/vuln/detail/CVE-2019-12900">CVE-2019-12900</a></li>
</ul>


<h3 id="defect-fixes-1">Defect fixes</h3>
<ul>

<li>Fixed an issue where compiling the kernel module failed on recent distributions, such as Fedora 40, which uses GCC 14.</li>

<li>The application now verifies FIPS support during execution.</li>

<li>Fixed an issue where suppressed process exit events could result in unexpected resource accumulation. This update ensures proper resource cleanup and improves memory efficiency.</li>
</ul>]]></content:encoded><guid isPermaLink="false">13.8.0 February 20, 2025</guid></item><item><title>Linux Agent - 13.7.2 January 17, 2025</title><link>https://docs.sysdig.com/en/release-notes/linux-agent-release-notes/#13.7.2-january-17-2025</link><description>This hotfix addresses the following security vulnerability:</description><content:encoded><![CDATA[<ul>

<li>Supported <code>sysdig-deploy</code> version: 1.74.1</li>

<li>Supported Falco Engine version: 1000.36.0</li>
</ul>


<h3 id="vulnerability-fixes-2">Vulnerability Fixes</h3>
<p>This hotfix addresses the following security vulnerability:</p>

<ul>

<li><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-45338">CVE-2024-45338</a></li>
</ul>


<h3 id="defect-fixes-2">Defect Fixes</h3>
<p>Fixed a defect that could prevent the scan result from generating when the host has a large number of kernels installed.</p>]]></content:encoded><guid isPermaLink="false">13.7.2 January 17, 2025</guid></item></channel></rss>