Traefik 3.7.15 → 3.7.17
2 releases · 0 breaking changes · 2 security fixes · 1 advisory fixed
2security0breaking0deprecated0feature17fix
Vulnerabilities fixed by this upgrade
- 7.0 GHSA-hrpp-p4fc-wwf8 ForwardAuth shares the auth-server connection pool, leaking NTLM/Negotiate-bound identity across clients
Breaking changes
None in the release notes.
Security changes
- security [security] Point security announcements to GitHub advisories ( @nmengin) in 3.7.17
- security Advisory GHSA-hrpp-p4fc-wwf8 in 3.7.16
Every release in between
fix[acme] Bump github.com/go-acme/lego/v5 to v5.6.0 ( @ldez)
fix[acme] Bump github.com/go-jose/go-jose/v4 to v4.1.6 ( @Mheaus)
fix[http3] Bump github.com/quic-go/quic-go to v0.64.1 ( @janpachol)
fix[k8s/gatewayapi] Preserve Gateway status conditions owned by other controllers ( @Neffi42)
fix[k8s/ingress-nginx] Avoid generated name collisions across namespaces in the ingress-nginx provider ( @Neffi42)
fix[logs, k8s/gatewayapi] Lower user configuration error logs to debug ( @rtribotte)
fix[middleware] Bump github.com/andybalholm/brotli to v1.2.7 ( @albe2669)
fix[middleware] Fix broken flush, hijack, and deadlines in wrapped ResponseWriters ( @Neffi42)
fix[middleware, authentication, k8s/crd, k8s, k8s/ingress-nginx] Resolve secret references when building middlewares ( @sdelicata)
fix[server] Add an entry point option to limit the number of request header values ( @juliens)
fix[server] Add global default for aliasHeadersStrategy ( @nikolas-sapa)
fix[server] Bump golang.org/x/net to v0.62.0 ( @kevinpollet)
fix[server] Fix backend connection leak for NTLM and Kerberos authentication ( @juliens)
fix[server, fastproxy] Fix FastProxy backend connection leak for NTLM and Kerberos ( @juliens)
other[docker] Update Docker Basic guide to use Traefik v3.7 ( @Saku0512)
security[security] Point security announcements to GitHub advisories ( @nmengin)
securityAdvisory GHSA-hrpp-p4fc-wwf8
fix[authentication, service, k8s/ingress-nginx] Support NTLM and Kerberos in ForwardAuth and ingress-nginx auth-url ( @juliens)
fix[authentication, service] Support NTLM and Kerberos authentication in ForwardAuth ( @juliens)
fix[k8s/gatewayapi] Fix Gateway API conformance suite setup with the containerd image store ( @Neffi42)
other[k8s/ingress-nginx] Document that rewrite is supported in configuration-snippet ( @bingtang9)