diff --git a/pkg/model/components/cilium.go b/pkg/model/components/cilium.go
index 2fb8f0e1bd79e..71dce1f930575 100644
--- a/pkg/model/components/cilium.go
+++ b/pkg/model/components/cilium.go
@@ -40,9 +40,9 @@ func (b *CiliumOptionsBuilder) BuildOptions(o interface{}) error {
 
 	if c.Version == "" {
 		if b.Context.IsKubernetesLT("1.12.0") {
-			c.Version = "v1.6.11"
+			c.Version = "v1.6.12"
 		} else {
-			c.Version = "v1.8.3"
+			c.Version = "v1.8.4"
 		}
 	}
 
diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/cilium/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/cilium/manifest.yaml
index 56febff913a8b..3ee530091f01f 100644
--- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/cilium/manifest.yaml
+++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/cilium/manifest.yaml
@@ -89,7 +89,7 @@ spec:
   - id: k8s-1.12
     kubernetesVersion: '>=1.12.0'
     manifest: networking.cilium.io/k8s-1.12-v1.8.yaml
-    manifestHash: 0d0cb351894e81048b6c7046e15bd3a0c02c0ee9
+    manifestHash: d3ec6a179bbf7de2fdc6d34190cc31819ece539b
     name: networking.cilium.io
     selector:
       role.kubernetes.io/networking: "1"