We are pleased to release Cilium v1.8.12. This release updates Envoy to release 1.18.4 which fixes CVE-2021-32777, CVE-2021-32779, CVE-2021-32781 and CVE-2021-32778. For more details and details of other bugs fixed, see the description below.
Summary of Changes
Minor Changes:
- Cilium Envoy integration is updated to release 1.18.4. (#17202, @jrajahalme)
Bugfixes:
- Potential deadlock in pod identity updates has been fixed. (Backport PR #17015, Upstream PR #16801, @jrajahalme)
CI Changes:
Misc Changes:
- .github: add MLH config for flake tracking (#17043, @aanm)
- backporting: Suggest only one related commit for a backport (Backport PR #17015, Upstream PR #16907, @joestringer)
- build(deps): bump actions/setup-go from 2.1.3 to 2.1.4 (#17249, @dependabot[bot])
- build(deps): bump docker/build-push-action from 2.6.1 to 2.7.0 (#17197, @dependabot[bot])
- contrib: Improve release script guard rails (Backport PR #17015, Upstream PR #16936, @joestringer)
- policy: Do not dump selections on logs (Backport PR #17015, Upstream PR #12927, @jrajahalme)
- update Cilium base images (#17209, @aanm)
- v1.8: Update cilium base images (#17268, @joestringer)
Other Changes:
- github: fix GH workflows to handle push events to stable branches (#16978, @aanm)
- install: Update image digests for v1.8.11 (#16985, @joestringer)
Docker Manifests
cilium
docker.io/cilium/cilium:v1.8.12@sha256:2ff5e167ae861cc0301de0b4aab3e44a6ed375731ad5652894e89fb9aa216643
quay.io/cilium/cilium:v1.8.12@sha256:2ff5e167ae861cc0301de0b4aab3e44a6ed375731ad5652894e89fb9aa216643
docker-plugin
docker.io/cilium/docker-plugin:v1.8.12@sha256:8786fc604a4cedd46dd6900031f0441a991734fa5907858f5fb293b95623fc3a
quay.io/cilium/docker-plugin:v1.8.12@sha256:8786fc604a4cedd46dd6900031f0441a991734fa5907858f5fb293b95623fc3a
hubble-relay
docker.io/cilium/hubble-relay:v1.8.12@sha256:63e7612a4cf9222a0b465895e06bfd6d91dfe6225543f38648a7836a4e0a9e8c
quay.io/cilium/hubble-relay:v1.8.12@sha256:63e7612a4cf9222a0b465895e06bfd6d91dfe6225543f38648a7836a4e0a9e8c
operator-aws
docker.io/cilium/operator-aws:v1.8.12@sha256:b4c5696438c7d29c533c7177eca563afc444483fad44d87752a4076dee035a92
quay.io/cilium/operator-aws:v1.8.12@sha256:b4c5696438c7d29c533c7177eca563afc444483fad44d87752a4076dee035a92
operator-azure
docker.io/cilium/operator-azure:v1.8.12@sha256:f280b8cb8222edaffa327124053981096abecd8b715b9314567473a660a56f9a
quay.io/cilium/operator-azure:v1.8.12@sha256:f280b8cb8222edaffa327124053981096abecd8b715b9314567473a660a56f9a
operator-generic
docker.io/cilium/operator-generic:v1.8.12@sha256:0fce5d11c3f9c40f7347eca3a558c7bc9c6ac45b2c8c1e513da97258e54c3e36
quay.io/cilium/operator-generic:v1.8.12@sha256:0fce5d11c3f9c40f7347eca3a558c7bc9c6ac45b2c8c1e513da97258e54c3e36
operator
docker.io/cilium/operator:v1.8.12@sha256:885577181ea1734d4e155bb3a5e64199dc58f59d452413d6f0d3edb3776e0316
quay.io/cilium/operator:v1.8.12@sha256:885577181ea1734d4e155bb3a5e64199dc58f59d452413d6f0d3edb3776e0316