diff --git a/.github/workflows/reusable_build_packages.yaml b/.github/workflows/reusable_build_packages.yaml
index 9ff23a9a378..a4068e3b3a3 100644
--- a/.github/workflows/reusable_build_packages.yaml
+++ b/.github/workflows/reusable_build_packages.yaml
@@ -49,7 +49,7 @@ jobs:
           yum -y install centos-release-scl
           yum -y install devtoolset-9-gcc devtoolset-9-gcc-c++
           source /opt/rh/devtoolset-9/enable
-          yum install -y wget git make m4 rpm-build
+          yum install -y wget git make m4 rpm-build perl-IPC-Cmd
     
       - name: Checkout
         uses: actions/checkout@v3
diff --git a/cmake/modules/driver.cmake b/cmake/modules/driver.cmake
index a503d5c6971..fe4325015e7 100644
--- a/cmake/modules/driver.cmake
+++ b/cmake/modules/driver.cmake
@@ -26,8 +26,8 @@ else()
   # In case you want to test against another driver version (or branch, or commit) just pass the variable -
   # ie., `cmake -DDRIVER_VERSION=dev ..`
   if(NOT DRIVER_VERSION)
-    set(DRIVER_VERSION "5.1.0+driver")
-    set(DRIVER_CHECKSUM "SHA256=667efc38eaef76c1bbfa2d551c8a3a912f92b553c4efb793418c8b44340b99cf")
+    set(DRIVER_VERSION "aeff81476d0dcd3bfe7002e8642163b6bd11094e")
+    set(DRIVER_CHECKSUM "SHA256=b28f5e3335af8ebba9afa457ba1e687142a1399663cb23ddb133e5c72a7b206a")
   endif()
 
   # cd /path/to/build && cmake /path/to/source
diff --git a/cmake/modules/falcosecurity-libs.cmake b/cmake/modules/falcosecurity-libs.cmake
index 73797eaeced..c20ca03fc8a 100644
--- a/cmake/modules/falcosecurity-libs.cmake
+++ b/cmake/modules/falcosecurity-libs.cmake
@@ -27,8 +27,8 @@ else()
   # In case you want to test against another falcosecurity/libs version (or branch, or commit) just pass the variable -
   # ie., `cmake -DFALCOSECURITY_LIBS_VERSION=dev ..` 
   if(NOT FALCOSECURITY_LIBS_VERSION)
-    set(FALCOSECURITY_LIBS_VERSION "0.12.0")
-    set(FALCOSECURITY_LIBS_CHECKSUM "SHA256=26028d2e2141e17b6c7f28577d62c484335475fec8eef0ce088c97eab4dabe13")
+    set(FALCOSECURITY_LIBS_VERSION "aeff81476d0dcd3bfe7002e8642163b6bd11094e")
+    set(FALCOSECURITY_LIBS_CHECKSUM "SHA256=b28f5e3335af8ebba9afa457ba1e687142a1399663cb23ddb133e5c72a7b206a")
   endif()
 
   # cd /path/to/build && cmake /path/to/source
diff --git a/submodules/falcosecurity-testing b/submodules/falcosecurity-testing
index 3cc202497a5..c1000f89db5 160000
--- a/submodules/falcosecurity-testing
+++ b/submodules/falcosecurity-testing
@@ -1 +1 @@
-Subproject commit 3cc202497a5652ff368468157580f56c7a706b33
+Subproject commit c1000f89db562698a82a1516ab8000bf612ac2d7
diff --git a/userspace/engine/falco_engine_version.h b/userspace/engine/falco_engine_version.h
index 64d3fb9e481..9f9dba30d46 100644
--- a/userspace/engine/falco_engine_version.h
+++ b/userspace/engine/falco_engine_version.h
@@ -15,7 +15,7 @@ limitations under the License.
 */
 
 // The version of this Falco engine.
-#define FALCO_ENGINE_VERSION (20)
+#define FALCO_ENGINE_VERSION (21)
 
 // This is the result of running the following command:
 //   FALCO="falco -c ./falco.yaml"
@@ -23,4 +23,4 @@ limitations under the License.
 // It represents the fields supported by this version of Falco,
 // the event types, and the underlying driverevent schema. It's used to
 // detetect changes in engine version in our CI jobs.
-#define FALCO_ENGINE_CHECKSUM "38ef1ec34930828880c6d86527ccbf5aff6673935cbfcb968d21bd809d101bcb"
+#define FALCO_ENGINE_CHECKSUM "41dc03aebd3dd09e1aaaa1bb25055b65902c7c61c180cb9486d1d9850d18d67b"