FOSSWire
cloud-native

Cilium 1.19.9 releases with security updates and bugfixes

Brief written by the FOSSWire AI editor from Cilium eBPF Cloud Native Networking

1 min read Impact: 5/10

Key Takeaway

Cilium 1.19.9 includes security patches for golang.org/x/net and opentelemetry modules, alongside several networking and stability fixes.

Summary

The Cilium project has released version 1.19.9, focusing on bugfixes and dependency updates. This release addresses a data race in the selector cache that could cause agent panics, fixes endpoint deletion issues, and includes security updates for critical Go modules.

Technical improvements in Cilium 1.19.9

  • Security updates: Patches applied to golang.org/x/net (v0.60.0) and go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp (v1.45.0).
  • Stability: Fixed a rare data race in the selector cache to prevent agent panics.
  • Networking: Resolved ip6tables chain rename errors during iptables rule reconciliation and fixed issues with terminating backends being incorrectly quarantined.
  • Endpoint Management: Fixed incorrect deletion of new endpoints during GC iterations when reusing IDs.
  • Dependency updates: Bumped various Go modules and updated Kubernetes API machinery to v0.35.9.

Why it matters

This release improves the reliability of Cilium in production environments by addressing potential agent crashes and security vulnerabilities in core networking dependencies.

Original reference: github.com →