ubuntu:lunar security scanning vulns

[captncraig]

This is a tracking issue for security vulnerabilities in ubuntu:lunar reported by trivy:

• [ ] https://github.com/grafana/agent/security/code-scanning/14
• MEDIUM - libudev1- Disputed
• [ ] https://github.com/grafana/agent/security/code-scanning/13
• MEDIUM - libudev1- Disputed
• [ ] https://github.com/grafana/agent/security/code-scanning/12
• MEDIUM - libudev1- Disputed
• [ ] https://github.com/grafana/agent/security/code-scanning/11
• MEDIUM - libsystemd0- Disputed
• [ ] https://github.com/grafana/agent/security/code-scanning/10
• MEDIUM -libsystemd0- Disputed
• [ ] https://github.com/grafana/agent/security/code-scanning/9
• MEDIUM - libsystemd0- Disputed
• [ ] https://github.com/grafana/agent/security/code-scanning/8
• MEDIUM - libsystemd0-dev- Disputed
• [ ] https://github.com/grafana/agent/security/code-scanning/7
• MEDIUM - libsystemd0-dev- Disputed
• [ ] https://github.com/grafana/agent/security/code-scanning/6
• MEDIUM - libsystemd0-dev- Disputed
• [ ] https://github.com/grafana/agent/security/code-scanning/17
• LOW - passwd (not relevant to agent)
• [ ] https://github.com/grafana/agent/security/code-scanning/16
• LOW - openssl
• [ ] https://github.com/grafana/agent/security/code-scanning/5
• LOW - libssl3
• [ ] https://github.com/grafana/agent/security/code-scanning/15
• LOW - login (not relevant to agent)
• [ ] https://github.com/grafana/agent/security/code-scanning/4
• LOW - libc6 (not relevant to agent)
• [ ] https://github.com/grafana/agent/security/code-scanning/3
• LOW - libc-bin (not relevant to agent)
• [ ] https://github.com/grafana/agent/security/code-scanning/2
• LOW - gpgv (not relevant to agent)
• [ ] https://github.com/grafana/agent/security/code-scanning/1
• LOW - coreutils

None of these are HIGH severity, and none seem exploitable through grafana-agent functionality. Presumably, these will be resolved in future ubuntu versions, which we will update to as soon as feasible.

[github-actions[bot]]

This issue has been automatically marked as stale because it has not had any activity in the past 30 days. The issue will not be closed automatically, but a label will be added to it for tracking purposes.

If the opened issue is a bug, check if newer releases have fixed the issue. If the issue is no longer relevant, please feel free to close it. Thank you for your contributions!

[rfratto]

Hi there :wave:

On April 9, 2024, Grafana Labs announced Grafana Alloy, the spirital successor to Grafana Agent and the final form of Grafana Agent flow mode. As a result, Grafana Agent has been deprecated and will only be receiving bug and security fixes until its end-of-life around November 1, 2025.

To make things easier for maintainers, we're in the process of migrating all issues tagged variant/flow to the Grafana Alloy repository to have a single home for tracking issues. This issue is likely something we'll want to address in both Grafana Alloy and Grafana Agent, so just because it's being moved doesn't mean we won't address the issue in Grafana Agent :)