Skip to content

v2.10.5
Compare
Choose a tag to compare
@traefiker traefiker released this 11 Oct 14:22
· 318 commits to master since this release
v2.10.5
6a34f23
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Github Advisory GHSA-7v4p-328v-8v5g
Related to CVE-2023-39325

Bug fixes:

  • [accesslogs] Move origin fields capture to service level (#10126 by rtribotte)
  • [accesslogs] Fix preflight response status in access logs (#10142 by rtribotte)
  • [acme] Update go-acme/lego to v4.14.0 (#10087 by ldez)
  • [acme] Update go-acme/lego to v4.13.3 (#10077 by ldez)
  • [http3] Update quic-go to v0.37.5 (#10083 by ldez)
  • [http3] Update quic-go to v0.39.0 (#10137 by ldez)
  • [http3] Update quic-go to v0.37.6 (#10085 by ldez)
  • [http3] Update quic-go to v0.38.0 (#10086 by ldez)
  • [http3] Update quic-go to v0.38.1 (#10090 by ldez)
  • [kv] Ignore ErrKeyNotFound error for the KV provider (#10082 by sunyakun)
  • [middleware,authentication] Adjust forward auth to avoid connection leak (#10096 by wdhongtw)
  • [middleware,server] Improve CNAME flattening to avoid unnecessary error logging (#10128 by niallnsec)
  • [middleware] Allow X-Forwarded-For delete operation (#10132 by rtribotte)
  • [server] Update x/net and grpc/grpc-go (#10161 by rtribotte)
  • [webui] Add missing accessControlAllowOriginListRegex to middleware view (#10157 by DBendit)
  • Fix false positive in url anonymization (#10138 by jspdown)

Documentation:

Assets 21