# Cilium v1.20.4

> Networking & Messaging · 2026-10-23

A security-focused maintenance release upgrades Go and dependencies and removes an unused vulnerable binary. It also adds RRSA credential support and includes correctness fixes across networking, IPAM, Gateway API, and related components.

## Action needed
- **[security]** `CVE-2026-111943` and `Go` 1.26.10
  - `CVE-2026-111943` is addressed by upgrading `Go` to `1.26.10`, so compromised eMudhra intermediate CA certificates are no longer trusted. All dependencies also receive their latest patch versions.
- **[security]** The `pebble` binary, removed
  - The unused `pebble` binary was removed from the Cilium image to clear its Go standard library vulnerability findings.

## Other recorded changes
- 12 (defect_corrected 10, constraint_changed 2)

[Full analysis](https://ratatosk.io/en/releases/cilium/v1.20.4)

[Original release notes](https://github.com/cilium/cilium/releases/tag/v1.20.4)