falco-no-driver: update advisories (#27842)

Update advisories for CVE-2025-61727 and CVE-2025-61729
falco-no-driver itself does not contain any code that is vulnerable to
this CVE; however it pulls in libcontainer plugin from
https://github.com/falcosecurity/plugins/tree/main/plugins/container
which is vulnerable. The upstream maintainers will need to update to a
new version of > golang 1.24 and pull that in to fix the CVE. See also
falcosecurity/plugins#1056

Signed-off-by: David Negreira <david.negreira@chainguard.dev>

Author: dnegreira

falco-no-driver.advisories.yaml

@@ -70,6 +70,13 @@ advisories:
             componentType: go-module
             componentLocation: /usr/share/falco/plugins/libcontainer.so
             scanner: grype
+      - timestamp: 2025-12-10T14:49:35Z
+        type: pending-upstream-fix
+        data:
+          note: |
+            falco-no-driver itself does not contain any code that is vulnerable to this CVE; however it pulls in libcontainer plugin from https://github.com/falcosecurity/plugins/tree/main/plugins/container which is vulnerable.
+            The upstream maintainers will need to update to a new version of > golang 1.24 and pull that in to fix the CVE.
+            See also https://github.com/falcosecurity/plugins/issues/1056
 
   - id: CGA-4j34-g5f9-xvpm
     aliases:
@@ -301,6 +308,13 @@ advisories:
             componentType: go-module
             componentLocation: /usr/share/falco/plugins/libcontainer.so
             scanner: grype
+      - timestamp: 2025-12-10T14:50:36Z
+        type: pending-upstream-fix
+        data:
+          note: |
+            falco-no-driver itself does not contain any code that is vulnerable to this CVE; however it pulls in libcontainer plugin from https://github.com/falcosecurity/plugins/tree/main/plugins/container which is vulnerable.
+            The upstream maintainers will need to update to a new version of > golang 1.24 and pull that in to fix the CVE.
+            See also https://github.com/falcosecurity/plugins/issues/1056
 
   - id: CGA-cmfv-j6fr-3w46
     aliases: