# Cilium v1.18.13 — 1.18.13

- Product: Cilium (https://whatsnew.fyi/product/cilium)
- Vendor: Cilium
- Date: 2026-08-18
- Version: v1.18.13
- Original notes: https://github.com/cilium/cilium/releases/tag/v1.18.13
- Permalink: https://whatsnew.fyi/product/cilium/releases/v1.18.13

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Add support for VRRP and IGMP protocols in host firewall
- **fixed** — Host firewall BPF to tolerate unknown CT protocols and rely on policies
- **fixed** — Fix abnormal IP allocation caused by hostnetwork pod
- **fixed** — Fix potential hangs caused by Netlink errors in filterAndDestroySockets
- **fixed** — Fix CIDR reference counter in ipcache to use canonical prefixes
- **changed** — BPF ICMP SNAT now conditioned on BPF masquerading and inter-cluster SNAT

Summary of Changes
------------------

**Major Changes:**
* Add support for VRRP and IGMP protocols in host firewall (Backport PR cilium/cilium#47619, Upstream PR cilium/cilium#39872, @aditighag)

**Bugfixes:**
* bpf: hostfw: tolerate unknown CT protocols and rely on policies (Backport PR cilium/cilium#47619, Upstream PR cilium/cilium#47343, @smagnani96)
* Fix abnormal ip allocation caused by hostnetwork pod (Backport PR cilium/cilium#47687, Upstream PR cilium/cilium#47552, @haozhangami)
* Fix potential hangs caused by Netlink errors in filterAndDestroySockets. (Backport PR cilium/cilium#47799, Upstream PR cilium/cilium#46967, @ysksuzuki)
* ipcache: fix CIDR reference counter to use canonical prefixes (Backport PR cilium/cilium#47887, Upstream PR cilium/cilium#47208, @iwanhae)

**CI Changes:**
* .github: retry CLI and binary downloads over transient network errors (Backport PR cilium/cilium#47289, Upstream PR cilium/cilium#47167, @aanm)
* bpf: test: improve network policy testing (Backport PR cilium/cilium#47619, Upstream PR cilium/cilium#41906, @julianwiedmann)
* bpf: tests: IGMP improvements (Backport PR cilium/cilium#47619, Upstream PR cilium/cilium#43684, @julianwiedmann)
* chore: use GH_RUNNER_CILIUM_BASE_AMD64/ARM64 vars for integration-test runners (Backport PR cilium/cilium#47547, Upstream PR cilium/cilium#47182, @bogdankrasko)
* ci: build race images on push in the stable image builders (Backport PR cilium/cilium#47618, Upstream PR cilium/cilium#47616, @aanm)
* ci: draft renovate PRs until ciliumbot auto-approval (Backport PR cilium/cilium#47803, Upstream PR cilium/cilium#47364, @mhofstetter)
* ci: fix three renovate-PR CI flakes (kubectl download retry, merge-upload ref, EKS pool zones) (Backport PR cilium/cilium#47540, Upstream PR cilium/cilium#47357, @aanm)
* CI: fixed external-target readiness gating and ensured sig-network E2E JUnit reports are uploaded on failure. (Backport PR cilium/cilium#47289, Upstream PR cilium/cilium#46860, @aanm)
* ci: migrate set-commit-status to cilium/actions (Backport PR cilium/cilium#47803, Upstream PR cilium/cilium#47771, @bogdankrasko)
* ci: skip etcd log fetch when kvstore was never started (Backport PR cilium/cilium#47887, Upstream PR cilium/cilium#47801, @aanm)
* Collect /proc/net/softnet_stat, /proc/net/snmp and /proc/net/netstat in sysdumps to help diagnose host-level packet drops. (Backport PR cilium/cilium#47289, Upstream PR cilium/cilium#46985, @aanm)
* conformance-aws-cni: skip l7 and fqdn tests by name on chaining mode (Backport PR cilium/cilium#47289, Upstream PR cilium/cilium#47269, @aanm)
* Decrease CI costs on AWS (Backport PR cilium/cilium#47289, Upstream PR cilium/cilium#46615, @aanm)
* gha/e2e: cover etcd behind a service (Backport PR cilium/cilium#47411, Upstream PR cilium/cilium#47235, @giorio94)
* gha/kubespray: run on schedule, rather than on every push (Backport PR cilium/cilium#47735, Upstream PR cilium/cilium#47719, @giorio94)
* gha/lvh-kind: respect Kind image version also when config is provided (Backport PR cilium/cilium#47735, Upstream PR cilium/cilium#47703, @giorio94)
* gha: don't install LLVM and Clang in integration tests workflow (Backport PR cilium/cilium#47735, Upstream PR cilium/cilium#47717, @giorio94)
* gha: stop scheduled runs emitting spurious artifact warnings (Backport PR cilium/cilium#47289, Upstream PR cilium/cilium#46989, @aanm)
* images/scripts: Validate Envoy image vars against sed injection (Backport PR cilium/cilium#47803, Upstream PR cilium/cilium#47205, @MasloMaslane)
* Increase the timeout for the kvstore readiness wait in kind-based CI to avoid flakes on slow etcd image pulls. (Backport PR cilium/cilium#47289, Upstream PR cilium/cilium#46882, @aanm)
* pkg/rate: fix TestMaxParallelRequests flake under CI load (Backport PR cilium/cilium#47289, Upstream PR cilium/cilium#46856, @aanm)
* Revert "gha: don't install LLVM and Clang in integration tests workflow" (Backport PR cilium/cilium#47887, Upstream

_[Truncated at 4000 characters — full notes: https://github.com/cilium/cilium/releases/tag/v1.18.13]_