Cilium
v1.18.13Networking & Messaging2026年8月18日
ホストファイアウォールのプロトコル対応に加え、ネットワークや安定性に関する不具合修正、ランタイム動作と可観測性の変更が含まれています。依存関係やコンテナイメージも更新され、`google.golang.org/grpc` の更新はセキュリティ修正として扱われていますが、脆弱性の内容は公開されていません。
要対応 (1)
security
google.の v1.82.1 への更新golang. org/grpc google.を v1.82.1 に更新しました。この更新はセキュリティ修正です。golang. org/grpc
その他の記録済み変更 26 件すべてvalue changes 21 · fixes 4 · constraints 1
value changes (21)
- * bpf: Condition ICMP SNAT on BPF masquerading and inter-cluster SNAT (Backport PR cilium/cilium#47557, Upstream PR cilium/cilium#47021, @pchaigno)
- * bugtool: collect snmp6 and dev_snmp6 for IPv6 host packet drops (Backport PR cilium/cilium#47411, Upstream PR cilium/cilium#47353, @aanm)
- * chore(deps): update base-images (v1.18) (cilium/cilium#47493, @cilium-renovate[bot])
- * chore(deps): update dependency cilium/cilium-cli to v0.19.6 (v1.18) (cilium/cilium#47341, @cilium-renovate[bot])
- * chore(deps): update dependency cilium/cilium-cli to v0.19.7 (v1.18) (cilium/cilium#47578, @cilium-renovate[bot])
- * chore(deps): update dependency go to v1.25.13 (v1.18) (cilium/cilium#48004, @cilium-renovate[bot])
- * chore(deps): update dependency protocolbuffers/protobuf-go to v1.36.12 (v1.18) (cilium/cilium#47994, @cilium-renovate[bot])
- * chore(deps): update docker.io/library/golang docker tag to v1.25.13 (v1.18) (cilium/cilium#47951, @cilium-renovate[bot])
- * chore(deps): update docker.io/library/golang:1.25.12 docker digest to 2c7ebca (v1.18) (cilium/cilium#47869, @cilium-renovate[bot])
- * chore(deps): update docker.io/library/golang:1.25.12 docker digest to d2e20dc (v1.18) (cilium/cilium#47325, @cilium-renovate[bot])
- * chore(deps): update docker.io/library/ubuntu:24.04 docker digest to 561618e (v1.18) (cilium/cilium#47870, @cilium-renovate[bot])
- * chore(deps): update gcr.io/distroless/static:nonroot docker digest to f7f8f72 (v1.18) (cilium/cilium#47326, @cilium-renovate[bot])
- * chore(deps): update google/cloud-sdk docker tag to v577 (v1.18) (cilium/cilium#47512, @cilium-renovate[bot])
- * chore(deps): update quay.io/cilium/certgen docker tag to v0.4.8 (v1.18) (cilium/cilium#47327, @cilium-renovate[bot])
- * chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.36.9-1784803288-cf56df1cccc09d7afde2847ff9e6e853dde50b77 (v1.18) (cilium/cilium#47491, @cilium-renovate[bot])
- * chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.36.9-1786864149-07e8503ff34b9190d7bbe4e57d4e185c4ef8b1de (v1.18) (cilium/cilium#48001, @cilium-renovate[bot])
- * policy/k8s: record processing start time for k8s NetworkPolicy updates (Backport PR cilium/cilium#47289, Upstream PR cilium/cilium#46979, @aanm)
- * Update docker.io/library/busybox:1.37.0 Docker digest to 9db7b59 (v1.18) (cilium/cilium#47664, @cilium-renovate[bot])
- * Update quay.io/cilium/certgen Docker tag to v0.4.9 (v1.18) (cilium/cilium#47665, @cilium-renovate[bot])
- * [v1.18] Add DNS request checking prior to qname extraction (cilium/cilium#47385, @ferozsalam)
- * install: Update image digests for v1.18.12 (cilium/cilium#47251, @cilium-release-bot[bot])
fixes (4)
- * bpf: hostfw: tolerate unknown CT protocols and rely on policies (Backport PR cilium/cilium#47619, Upstream PR cilium/cilium#47343, @smagnani96)
- * Fix abnormal ip allocation caused by hostnetwork pod (Backport PR cilium/cilium#47687, Upstream PR cilium/cilium#47552, @haozhangami)
- * Fix potential hangs caused by Netlink errors in filterAndDestroySockets. (Backport PR cilium/cilium#47799, Upstream PR cilium/cilium#46967, @ysksuzuki)
- * ipcache: fix CIDR reference counter to use canonical prefixes (Backport PR cilium/cilium#47887, Upstream PR cilium/cilium#47208, @iwanhae)
constraints (1)
- * Add support for VRRP and IGMP protocols in host firewall (Backport PR cilium/cilium#47619, Upstream PR cilium/cilium#39872, @aditighag)
Ciliumをスタックに追加
対応が必要なリリースが出たときに、週次メールでお知らせします。 今回のセキュリティパッチも、その一例です。