RATATOSKRATATOSK
로그인

Cilium

v1.18.13Networking & Messaging
2026년 8월 18일

ACTION 1OTHER 26

호스트 방화벽의 프로토콜 지원이 추가되고 네트워킹 및 안정성 결함이 수정됐습니다. 런타임 동작과 관측성이 바뀌었으며 의존성과 컨테이너 이미지도 업데이트됐고, 보안 수정으로 표시된 `google.golang.org/grpc` 업데이트의 취약점 내용은 공개되지 않았습니다.

조치 필요 (1)

  • securitygoogle.golang.org/grpc 의존성 업데이트

    google.golang.org/grpc 의존성을 v1.82.1로 업데이트했습니다. 보안 수정으로 표시된 변경입니다.

그 외 기록된 변경 26건 전체value changes 21 · fixes 4 · constraints 1

value changes (21)

  • * bpf: Condition ICMP SNAT on BPF masquerading and inter-cluster SNAT (Backport PR cilium/cilium#47557, Upstream PR cilium/cilium#47021, @pchaigno)
  • * bugtool: collect snmp6 and dev_snmp6 for IPv6 host packet drops (Backport PR cilium/cilium#47411, Upstream PR cilium/cilium#47353, @aanm)
  • * chore(deps): update base-images (v1.18) (cilium/cilium#47493, @cilium-renovate[bot])
  • * chore(deps): update dependency cilium/cilium-cli to v0.19.6 (v1.18) (cilium/cilium#47341, @cilium-renovate[bot])
  • * chore(deps): update dependency cilium/cilium-cli to v0.19.7 (v1.18) (cilium/cilium#47578, @cilium-renovate[bot])
  • * chore(deps): update dependency go to v1.25.13 (v1.18) (cilium/cilium#48004, @cilium-renovate[bot])
  • * chore(deps): update dependency protocolbuffers/protobuf-go to v1.36.12 (v1.18) (cilium/cilium#47994, @cilium-renovate[bot])
  • * chore(deps): update docker.io/library/golang docker tag to v1.25.13 (v1.18) (cilium/cilium#47951, @cilium-renovate[bot])
  • * chore(deps): update docker.io/library/golang:1.25.12 docker digest to 2c7ebca (v1.18) (cilium/cilium#47869, @cilium-renovate[bot])
  • * chore(deps): update docker.io/library/golang:1.25.12 docker digest to d2e20dc (v1.18) (cilium/cilium#47325, @cilium-renovate[bot])
  • * chore(deps): update docker.io/library/ubuntu:24.04 docker digest to 561618e (v1.18) (cilium/cilium#47870, @cilium-renovate[bot])
  • * chore(deps): update gcr.io/distroless/static:nonroot docker digest to f7f8f72 (v1.18) (cilium/cilium#47326, @cilium-renovate[bot])
  • * chore(deps): update google/cloud-sdk docker tag to v577 (v1.18) (cilium/cilium#47512, @cilium-renovate[bot])
  • * chore(deps): update quay.io/cilium/certgen docker tag to v0.4.8 (v1.18) (cilium/cilium#47327, @cilium-renovate[bot])
  • * chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.36.9-1784803288-cf56df1cccc09d7afde2847ff9e6e853dde50b77 (v1.18) (cilium/cilium#47491, @cilium-renovate[bot])
  • * chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.36.9-1786864149-07e8503ff34b9190d7bbe4e57d4e185c4ef8b1de (v1.18) (cilium/cilium#48001, @cilium-renovate[bot])
  • * policy/k8s: record processing start time for k8s NetworkPolicy updates (Backport PR cilium/cilium#47289, Upstream PR cilium/cilium#46979, @aanm)
  • * Update docker.io/library/busybox:1.37.0 Docker digest to 9db7b59 (v1.18) (cilium/cilium#47664, @cilium-renovate[bot])
  • * Update quay.io/cilium/certgen Docker tag to v0.4.9 (v1.18) (cilium/cilium#47665, @cilium-renovate[bot])
  • * [v1.18] Add DNS request checking prior to qname extraction (cilium/cilium#47385, @ferozsalam)
  • * install: Update image digests for v1.18.12 (cilium/cilium#47251, @cilium-release-bot[bot])

fixes (4)

  • * bpf: hostfw: tolerate unknown CT protocols and rely on policies (Backport PR cilium/cilium#47619, Upstream PR cilium/cilium#47343, @smagnani96)
  • * Fix abnormal ip allocation caused by hostnetwork pod (Backport PR cilium/cilium#47687, Upstream PR cilium/cilium#47552, @haozhangami)
  • * Fix potential hangs caused by Netlink errors in filterAndDestroySockets. (Backport PR cilium/cilium#47799, Upstream PR cilium/cilium#46967, @ysksuzuki)
  • * ipcache: fix CIDR reference counter to use canonical prefixes (Backport PR cilium/cilium#47887, Upstream PR cilium/cilium#47208, @iwanhae)

constraints (1)

  • * Add support for VRRP and IGMP protocols in host firewall (Backport PR cilium/cilium#47619, Upstream PR cilium/cilium#39872, @aditighag)
Cilium 스택에 추가

조치가 필요한 릴리스가 나왔을 때 주간 메일로 알려드립니다. 이번 릴리스의 보안 패치 같은 것들입니다.

스택에 추가 →
공식 릴리스 노트 ↗Cilium 릴리스 전체 →