RATATOSKRATATOSK
Sign in

Cilium

v1.19.10Networking & Messaging
Oct 23, 2026

ACTION 1OTHER 3

A security-focused patch release updates `Go` and dependencies, with a fix for compromised eMudhra intermediate CA certificates. It also includes namespace-scoping and Gateway API conflict-detection corrections, plus updated image digests that change some operator-visible behavior.

Action needed (1)

  • securityGo 1.26.10 and dependency refresh for CVE-2026-111943

    This security patch upgrades Go to 1.26.10 so compromised eMudhra intermediate CA certificates are no longer trusted. It also updates all dependencies to their latest patch versions in this release.

    golang/go#82345

All 3 other recorded changesadditions 1 · fixes 1 · value changes 1

additions (1)

  • * Gateway API: backport listener hostname, port and protocol conflict detection (cilium/cilium#49450, @asauber)

fixes (1)

  • * CiliumEnvoyConfig now only redirects Services in its own namespace, as documented; service references in CiliumClusterwideEnvoyConfig without a namespace default to "default" again. (Backport PR cilium/cilium#49475, Upstream PR cilium/cilium#49076, @maxskokov)

value changes (1)

  • * install: Update image digests for v1.19.9 (cilium/cilium#49389, @cilium-release-bot[bot])
Add Cilium to your stack

A weekly email arrives when a release needs action. Like the security patches in this release.

Add to stack →
Official release note ↗All Cilium releases →