Cilium

v1.19.9Networking & Messaging

Oct 15, 2026

A maintenance release focused on correctness fixes and dependency updates, including several undisclosed security-related dependency upgrades. No operator configuration changes are stated.

Action needed (3)

securitygo.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp update to v1.45.0
The module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp is updated to v1.45.0 in the v1.19 release.
securitygolang.org/x/net update to v0.60.0
The module golang.org/x/net is updated to v0.60.0 in the v1.19 release.
securitySecurity-related dependency updates
Security-related dependency updates ship in the v1.19 release.

All 22 other recorded changesvalue changes 14 · fixes 8

value changes (14)

[v1.19] Bump various go modules (cilium/cilium#48768, @ferozsalam)
chore(deps): update base-images (v1.19) (cilium/cilium#48884, @cilium-renovate[bot])
chore(deps): update base-images to v1.26.9 (v1.19) (cilium/cilium#49154, @cilium-renovate[bot])
chore(deps): update dependency protocolbuffers/protobuf to v36.2 (v1.19) (cilium/cilium#49044, @cilium-renovate[bot])
chore(deps): update docker.io/library/alpine docker tag to v3.23.6 (v1.19) (cilium/cilium#49041, @cilium-renovate[bot])
chore(deps): update docker.io/library/busybox:1.37.0 docker digest to bdf57e5 (v1.19) (cilium/cilium#49040, @cilium-renovate[bot])
chore(deps): update docker.io/library/golang:1.26.9 docker digest to d772206 (v1.19) - abandoned (cilium/cilium#49299, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.38.5-1790882336-b64c7306085409b95fb5626db2d2bb7a200b9432 (v1.19) (cilium/cilium#49127, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.38.5-1791291190-5ec36181d464cd75b35b45395a722226cbdd2888 (v1.19) (cilium/cilium#49195, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.38.6-1791350265-ae0327a34850b7d1849e8332dbefd4d5bebabe10 (v1.19) (cilium/cilium#49217, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.38.6-1791537840-00e749f11f69334c625e53fc1ce2fc6c7f34a51f (v1.19) (cilium/cilium#49278, @cilium-renovate[bot])
fix(deps): update k8s.io patch updates stable to v0.35.9 (v1.19) (cilium/cilium#49156, @cilium-renovate[bot])
fix(deps): update module k8s.io/apimachinery to v0.35.9 (v1.19) (cilium/cilium#49043, @cilium-renovate[bot])
install: Update image digests for v1.19.8 (cilium/cilium#48752, @cilium-release-bot[bot])

fixes (8)

endpoint/restore: skip cleanup for reserved internal endpoints (Backport PR cilium/cilium#49000, Upstream PR cilium/cilium#48272, @fristonio)
Fix incorrect deletion of new endpoint during GC iteration when reusing ID from a previously GC'd endpoint (Backport PR cilium/cilium#49176, Upstream PR cilium/cilium#48905, @fristonio)
Fix ip6tables chain rename errors being silently ignored during iptables rule reconciliation. (Backport PR cilium/cilium#49334, Upstream PR cilium/cilium#49024, @maxskokov)
Fix rare data race in selector cache that could lead to agent panic (Backport PR cilium/cilium#49176, Upstream PR cilium/cilium#47733, @odinuge)
Fix restoration of terminating backends. If a terminating backend become active again during restart the backend was incorrectly kept as quarantined. (Backport PR cilium/cilium#48796, Upstream PR cilium/cilium#48763, @joamaki)
gateway-api: filter CEC controls from infrastructure metadata (Backport PR cilium/cilium#48985, Upstream PR cilium/cilium#47732, @nezdolik)
operator: Do not emit warning when deleting already deleted unmanaged pod (Backport PR cilium/cilium#48908, Upstream PR cilium/cilium#48765, @gandro)
[v1.19] node_neighbor_discovery: fix ID in delete query (cilium/cilium#48871, @nobleess)

Add Cilium to your stack

A weekly email arrives when a release needs action. Like the security patches in this release.

Add to stack →

Official release note ↗All Cilium releases →