RATATOSKRATATOSK
로그인

Cilium

v1.19.7Networking & Messaging
2026년 8월 18일

OTHER 45

버그 수정과 진단 기능 개선, 의존성 및 이미지 업데이트가 포함된 릴리스입니다. DNS 요청 검증도 개선했으며, 보안 권고나 명시적으로 설명된 취약점은 포함되지 않았습니다.

그 외 기록된 변경 45건 전체value changes 26 · fixes 14 · additions 4 · constraints 1

value changes (26)

  • chore(deps): update all github action dependencies (v1.19)×5
  • chore(deps): update all-dependencies (v1.19)
  • chore(deps): update base-images (v1.19)×2
  • chore(deps): update dependency cilium/cilium-cli to … (…)×2
  • chore(deps): update docker.io/library/golang:… docker digest to … (…)×2
  • chore(deps): update gcr.io/distroless/static:nonroot docker digest to f7f8f72 (v1.19)
  • chore(deps): update github/codeql-action action to v4.37.2 (v1.19)
  • chore(deps): update google/cloud-sdk docker tag to v577 (v1.19)
  • chore(deps): update module sigs.k8s.io/kube-api-linter to v0.0.0-20260716143926-092fe0c72997 (v1.19)
  • chore(deps): update quay.io/cilium/certgen docker tag to v0.4.8 (v1.19)
  • chore(deps): update quay.io/cilium/cilium-envoy docker tag to … (…)×2
  • chore(deps): update stable lvh-images (v1.19) (patch)×3
  • fix(deps): update k8s.io patch updates stable to v0.35.7 (v1.19)
  • fix(deps): update module k8s.io/apimachinery to v0.35.7 (v1.19)
  • Update quay.io/cilium/certgen Docker tag to v0.4.9 (v1.19)
  • install: Update image digests for v1.19.6

fixes (14)

  • envoy: restore http-idle-timeout as the route idle timeout source
  • Fix a BPF verifier reject on pre-v5.12 kernels, when IPv6 is enabled.
  • Fix a spurious "unable to find ifindex for interface MAC" agent warning on EKS ENI IPAM by waiting for the ENI netlink interface before configuring ingress routes and rules.
  • Fix abnormal ip allocation caused by hostnetwork pod
  • Fix BPF LB map key collision where HostPort/NodePort expansion could overwrite a LoadBalancer frontend when the node IP matches the LoadBalancer external IP (e.g. k3s/RKE2 L2 ServiceLB). Also fix a ~30-minute NodePort outage that occurred after deleting a LoadBalancer whose external IP was a node address with a port in the NodePort range.
  • Fix bug causing Cilium to intercept traffic towards LoadBalancer VIPs when KPR is disabled, when the traffic should be delegated to kube-proxy.
  • Fix redirection of egressing traffic that falls in scope of a CiliumEgressGatewayPolicy, when the initial interface is a L3 interface.
  • Fix: Cilium Ingress now automatically reallocates ports and retries when cilium-envoy fails to bind due to port conflicts
  • fqdn/service: prune SDP identity->IP mapping on delete using newID
  • gateway-api: GAMMA Routes are now filtered correctly before being passed to model ingestion.
  • ipcache: fix CIDR reference counter to use canonical prefixes
  • lbipam: prevent reassigning Service LoadBalancer IPs on operator restart when the existing IP belongs to a compatible sharing key group.
  • Resolve a endpoint manager crash for restored endpoints with verbose policy logging enabled.
  • wireguard: Unsubscribe node handler on shutdown

additions (4)

  • Collect /proc/net/softnet_stat, /proc/net/snmp and /proc/net/netstat in sysdumps to help diagnose host-level packet drops.
  • bugtool: collect snmp6 and dev_snmp6 for IPv6 host packet drops
  • Update docker.io/library/busybox:1.37.0 Docker digest to 9db7b59 (v1.19)
  • [v1.19] Add DNS request checking prior to qname extraction

constraints (1)

  • Fixes an issue where invalid regex on an HTTPRoute or GRPCRoute matcher is accepted but causes Envoy to NACK
Cilium 스택에 추가

조치가 필요한 변경이 나오면 주간 메일로 받아볼 수 있습니다. 이번 릴리스처럼 조치가 없는 주에는 메일을 보내지 않습니다.

스택에 추가 →
공식 릴리스 노트 ↗Cilium 릴리스 전체 →