Cilium
v1.18.14Networking & Messaging2026년 9월 16일
버그 수정과 의존성 업데이트, 이미지 갱신에 초점을 둔 유지보수 릴리스입니다. 공개되지 않은 보안 의존성 수정과 운영자 검토가 필요할 수 있는 데이터 경로 동작 변경도 포함되어 있습니다.
조치 필요 (3)
security
google.를golang. org/grpc v1.로 업데이트83. 1 보안 수정을 위해
google.모듈이golang. org/grpc v1.로 업데이트되었습니다.83. 1 security
google.를golang. org/grpc v1.로 업데이트83. 2 보안 수정을 위해
google.모듈이golang. org/grpc v1.로 업데이트되었습니다.83. 2 breaking
RevSNAT와RevDNAT사이Ingress HostFW Policy제거RevSNAT와RevDNAT사이의Ingress HostFW Policy가 제거되었습니다.
그 외 기록된 변경 33건 전체value changes 17 · fixes 14 · additions 2
value changes (17)
- update all external docker images dependencies to v0.13.6
- update all-dependencies (v1.18)
- update base-images to v1.26.8
- update dependency go to v1.25.14
- update dependency protocolbuffers/protobuf to v36
- update dependency protocolbuffers/protobuf to v36.1
- update docker.io/library/golang docker tag to v1.25.14
- update docker.io/library/ubuntu:24.04 docker digest to 224a186
- update gcr.io/distroless/static:nonroot docker digest to e2e927e
- update quay.io/cilium/certgen docker tag to v0.4.11
- update quay.io/cilium/cilium-envoy docker tag to …×3
- Update node-cache image version to 1.26.5
- cilium: revert have_set_retval fix and probe it differently, v2
- proxy: Bump envoy to v1.37.x
- install: Update image digests for v1.18.13
fixes (14)
- Fixed a bug where the operator would fail to allocate new IPs to nodes with prefix delegation enabled on subnets that ran out of prefixes.
- Fix agent crash when dumping map events
- fix IPV4_DIRECT_ROUTING selection on lo device
- Fix Hubble Relay remains running during termination
- Fix missing config setup for 'enable-non-default-deny-policies' flag
- Fix nodeport egress tuple reuse for closed connections
- Fix restored ENI endpoints routing rule configuration when masquerading config changes
- fix(socketlb): only detach Cilium-owned cgroup programs
- Fixed a bug that caused the clustermesh-apiserver etcd users managements logic to not revoke stale roles upon configuration change
- Fixed five configuration options that were accepted but silently ignored:
vtep-sync-interval,enable-xt-socket-fallback,eni-delete-on-terminationwith a custom CNI configuration, theenableIdentityMarkHelm value outside CNI chaining mode, andlb-retry-backoff-max. - hubble: fix four config knobs that never reach their sink
- operator: Emit startup logs in the configured log format
- Strengthen the validation when ingesting service backends from Cluster Mesh to prevent issues in case of specially crafted values
- Fix verifier error "detect support for FnSetRetval for program type CGroupSock" during feature probing
additions (2)
- Add extension points for cilium-envoy Daemonset readiness, liveness and startup probes
- helm: add general busybox image values for substitution
Cilium 스택에 추가
조치가 필요한 릴리스가 나왔을 때 주간 메일로 알려드립니다. 이번 릴리스의 보안 패치와 브레이킹 체인지 같은 것들입니다.