RATATOSKRATATOSK
Sign in

Cilium

v1.18.13Networking & Messaging
Aug 18, 2026

ACTION 1OTHER 26

A maintenance release that adds host-firewall protocol support, corrects networking and stability defects, and changes runtime behavior and observability. It also updates dependencies and container images, including a gRPC security fix with no disclosed vulnerability.

Action needed (1)

  • securityThe google.golang.org/grpc dependency, updated to v1.82.1

    The google.golang.org/grpc module is updated to v1.82.1 in the v1.18 release line. The release note marks this dependency update as a security fix, but does not disclose the vulnerability.

All 26 other recorded changesvalue changes 21 · fixes 4 · constraints 1

value changes (21)

  • * bpf: Condition ICMP SNAT on BPF masquerading and inter-cluster SNAT (Backport PR cilium/cilium#47557, Upstream PR cilium/cilium#47021, @pchaigno)
  • * bugtool: collect snmp6 and dev_snmp6 for IPv6 host packet drops (Backport PR cilium/cilium#47411, Upstream PR cilium/cilium#47353, @aanm)
  • * chore(deps): update base-images (v1.18) (cilium/cilium#47493, @cilium-renovate[bot])
  • * chore(deps): update dependency cilium/cilium-cli to v0.19.6 (v1.18) (cilium/cilium#47341, @cilium-renovate[bot])
  • * chore(deps): update dependency cilium/cilium-cli to v0.19.7 (v1.18) (cilium/cilium#47578, @cilium-renovate[bot])
  • * chore(deps): update dependency go to v1.25.13 (v1.18) (cilium/cilium#48004, @cilium-renovate[bot])
  • * chore(deps): update dependency protocolbuffers/protobuf-go to v1.36.12 (v1.18) (cilium/cilium#47994, @cilium-renovate[bot])
  • * chore(deps): update docker.io/library/golang docker tag to v1.25.13 (v1.18) (cilium/cilium#47951, @cilium-renovate[bot])
  • * chore(deps): update docker.io/library/golang:1.25.12 docker digest to 2c7ebca (v1.18) (cilium/cilium#47869, @cilium-renovate[bot])
  • * chore(deps): update docker.io/library/golang:1.25.12 docker digest to d2e20dc (v1.18) (cilium/cilium#47325, @cilium-renovate[bot])
  • * chore(deps): update docker.io/library/ubuntu:24.04 docker digest to 561618e (v1.18) (cilium/cilium#47870, @cilium-renovate[bot])
  • * chore(deps): update gcr.io/distroless/static:nonroot docker digest to f7f8f72 (v1.18) (cilium/cilium#47326, @cilium-renovate[bot])
  • * chore(deps): update google/cloud-sdk docker tag to v577 (v1.18) (cilium/cilium#47512, @cilium-renovate[bot])
  • * chore(deps): update quay.io/cilium/certgen docker tag to v0.4.8 (v1.18) (cilium/cilium#47327, @cilium-renovate[bot])
  • * chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.36.9-1784803288-cf56df1cccc09d7afde2847ff9e6e853dde50b77 (v1.18) (cilium/cilium#47491, @cilium-renovate[bot])
  • * chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.36.9-1786864149-07e8503ff34b9190d7bbe4e57d4e185c4ef8b1de (v1.18) (cilium/cilium#48001, @cilium-renovate[bot])
  • * policy/k8s: record processing start time for k8s NetworkPolicy updates (Backport PR cilium/cilium#47289, Upstream PR cilium/cilium#46979, @aanm)
  • * Update docker.io/library/busybox:1.37.0 Docker digest to 9db7b59 (v1.18) (cilium/cilium#47664, @cilium-renovate[bot])
  • * Update quay.io/cilium/certgen Docker tag to v0.4.9 (v1.18) (cilium/cilium#47665, @cilium-renovate[bot])
  • * [v1.18] Add DNS request checking prior to qname extraction (cilium/cilium#47385, @ferozsalam)
  • * install: Update image digests for v1.18.12 (cilium/cilium#47251, @cilium-release-bot[bot])

fixes (4)

  • * bpf: hostfw: tolerate unknown CT protocols and rely on policies (Backport PR cilium/cilium#47619, Upstream PR cilium/cilium#47343, @smagnani96)
  • * Fix abnormal ip allocation caused by hostnetwork pod (Backport PR cilium/cilium#47687, Upstream PR cilium/cilium#47552, @haozhangami)
  • * Fix potential hangs caused by Netlink errors in filterAndDestroySockets. (Backport PR cilium/cilium#47799, Upstream PR cilium/cilium#46967, @ysksuzuki)
  • * ipcache: fix CIDR reference counter to use canonical prefixes (Backport PR cilium/cilium#47887, Upstream PR cilium/cilium#47208, @iwanhae)

constraints (1)

  • * Add support for VRRP and IGMP protocols in host firewall (Backport PR cilium/cilium#47619, Upstream PR cilium/cilium#39872, @aditighag)
Add Cilium to your stack

A weekly email arrives when a release needs action. Like the security patches in this release.

Add to stack →
Official release note ↗All Cilium releases →