Affected by GO-2025-3560 and 7 other vulnerabilities

GO-2025-3560: Cilium East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancers in github.com/cilium/cilium

GO-2025-3561: Cilium node based network policies may incorrectly allow workload traffic in github.com/cilium/cilium

GO-2025-3635: In Cilium, packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters in github.com/cilium/cilium

GO-2025-4167: Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic in Ciliumgithub.com/cilium/cilium

GO-2026-4856: Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic in github.com/cilium/cilium

GO-2026-5400: Cillium exposes sensitive information included in the cilium-bugtool debug archive in github.com/cilium/cilium

GO-2026-5905: Cilium vulnerable to sensitive information disclosure and cluster disruption via local Envoy admin socket access in github.com/cilium/cilium

GO-2026-5914: CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation in github.com/cilium/cilium

common

package

v1.17.0 Latest Latest Go to latest Published: Feb 3, 2025 License: Apache-2.0 Imports: 5 Imported by: 11

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/cilium/cilium

Links

Documentation ¶

Index ¶

Constants
func C2GoArray(str string) []byte
func GoArray2C(array []byte) string
func GoArray2CNoSpaces(array []byte) string
func MergeChannels[T any](chans ...<-chan T) <-chan T
func RequireRootPrivilege(cmd string)

Constants ¶

View Source

const (

	// CHeaderFileName is the name of the C header file for BPF programs for a
	// particular endpoint.
	CHeaderFileName = "ep_config.h"

	// EndpointStateFileName is used as the file name for the JSON representation
	// of endpoint state.
	EndpointStateFileName = "ep_config.json"
)

Variables ¶

This section is empty.

Functions ¶

func C2GoArray ¶

func C2GoArray(str string) []byte

C2GoArray transforms an hexadecimal string representation into a byte slice. Example: str := "0x12, 0xff, 0x0, 0x1" fmt.Print(C2GoArray(str)) //`{0x12, 0xFF, 0x0, 0x01}`"

func GoArray2C ¶

func GoArray2C(array []byte) string

GoArray2C transforms a byte slice into its hexadecimal string representation. Example: array := []byte{0x12, 0xFF, 0x0, 0x01} fmt.Print(GoArray2C(array)) // "{ 0x12, 0xff, 0x0, 0x1 }"

func GoArray2CNoSpaces ¶

func GoArray2CNoSpaces(array []byte) string

GoArray2CNoSpaces does the same as GoArray2C, but no spaces are used in the final output. Example: array := []byte{0x12, 0xFF, 0x0, 0x01} fmt.Print(GoArray2CNoSpaces(array)) // "{0x12,0xff,0x0,0x1}"

func MergeChannels ¶ added in v1.17.0

func MergeChannels[T any](chans ...<-chan T) <-chan T

func RequireRootPrivilege ¶

func RequireRootPrivilege(cmd string)

RequireRootPrivilege checks if the user running cmd is root. If not, it exits the program

Types ¶

This section is empty.

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
ipsec