Commits (196) 2026-10-24 21:09 Thomas Zander (riggs) · 3.7.16
net/traefik: Update to upstream release 3.7.16
Details:
- Bug- and security fixes, see
https://github.com/traefik/traefik/releases/tag/v3.7.16
MFH: 2026Q4
Security: https://github.com/traefik/traefik/security/advisories/GHSA-hrpp-p4fc-wwf8 2354a0a5d8 2026-10-20 13:05 Dag-Erling Smørgrav (des) · 3.7.15_1
various: Bump Go ports for Go 1.26.10 / 1.27.3 d81b7ba3c3 2026-10-17 22:58 Thomas Zander (riggs) · 3.7.15
net/traefik: Update to upstream release 3.7.15
Details:
- Bug- and security fixes, see
https://github.com/traefik/traefik/releases/tag/v3.7.15
MFH: 2026Q4
Security: https://github.com/traefik/traefik/security/advisories/GHSA-p8wx-ph99-xgcr
https://github.com/traefik/traefik/security/advisories/GHSA-ww7c-q3mv-xx22
https://github.com/traefik/traefik/security/advisories/GHSA-28hp-c82p-8vqj 9e3f193d2e 2026-10-10 13:08 Thomas Zander (riggs) · 3.7.14
net/traefik: Update to upstream release 3.7.14
Details:
- Bug- and security fixes, see
https://github.com/traefik/traefik/releases/tag/v3.7.14
MFH: 2026Q4
Security: https://github.com/traefik/traefik/security/advisories/GHSA-53qr-784g-cj35
https://github.com/traefik/traefik/security/advisories/GHSA-cw35-4q88-3rmp
https://github.com/traefik/traefik/security/advisories/GHSA-fh26-gfpp-7xxx
https://github.com/traefik/traefik/security/advisories/GHSA-mwrr-6hp4-pxr6
https://github.com/traefik/traefik/security/advisories/GHSA-qm9f-w54v-q2qh
https://github.com/traefik/traefik/security/advisories/GHSA-qvj7-gq9c-hp7q
https://github.com/traefik/traefik/security/advisories/GHSA-rv2h-qh7j-xrjw
https://github.com/traefik/traefik/security/advisories/GHSA-mhjw-hmjv-p99x 59439a24e5 2026-10-08 22:44 Dag-Erling Smørgrav (des) · 3.7.13_1
various: Bump Go ports 031fc6bfbf 2026-10-01 09:52 Dag-Erling Smørgrav (des) · 3.7.13
various: Drop Go 1.26+ version pin
This is a nop since 1.26 is the oldest supported version. 2c73fa4d6e 2026-09-16 23:35 Thomas Zander (riggs) · 3.7.13
net/traefik: Update to upstream release 3.7.13
Details:
* Bug- and security fixes, see
https://github.com/traefik/traefik/releases/tag/v3.7.13
* Changes may require updating the configuration, see
https://doc.traefik.io/traefik/v3.7/migrate/v3/#v3713
MFH: 2026Q3
Security: https://github.com/traefik/traefik/security/advisories/GHSA-qqjf-53cj-pwvv
https://github.com/traefik/traefik/security/advisories/GHSA-f52w-8j3h-j724
https://github.com/traefik/traefik/security/advisories/GHSA-v67p-phpq-fc8x
https://github.com/traefik/traefik/security/advisories/GHSA-w4v4-9rw7-5326
https://github.com/traefik/traefik/security/advisories/GHSA-8fcf-v89g-xpg6 8fb2c0fd08 2026-09-03 06:50 Adam Weinberger (adamw) · 3.7.11_1
many: Bump go ports for 1.26.8 and 1.27.1 dd0905142a 2026-08-23 18:51 Thomas Zander (riggs) · 3.7.11
net/traefik: Update to upstream version 3.7.11
Details:
- Multiple bug- and security fixes, see
https://github.com/traefik/traefik/releases/tag/v3.7.11
- No breaking config changes
MFH: 2026Q3
Security: https://github.com/traefik/traefik/security/advisories/GHSA-5w68-77r2-r64c
https://github.com/traefik/traefik/security/advisories/GHSA-g55h-rg46-x9c5
https://github.com/traefik/traefik/security/advisories/GHSA-j994-9gqj-9hwq
https://github.com/traefik/traefik/security/advisories/GHSA-m6wx-622r-48r9 c823c538ba 2026-08-19 19:39 Dag-Erling Smørgrav (des) · 3.7.10_2
various: Bump go ports for go-1.25.14 / 1.26.7 4867821cd6 2026-08-14 02:38 Dag-Erling Smørgrav (des) · 3.7.10_1
various: Bump go ports for go-1.25.13 / 1.26.6 6d39dcf04e 2026-08-02 08:49 Thomas Zander (riggs) · 3.7.10
net/traefik: Update to upstream release 3.7.10
Details:
- Bugfix release, see
https://github.com/traefik/traefik/releases/tag/v3.7.10
MFH: 2026Q3 1454efd1ab 2026-07-25 19:00 Thomas Zander (riggs) · 3.7.9
net/traefik: Update to upstream release 3.7.9
Details:
- Bugfix release, see
https://github.com/traefik/traefik/releases/tag/v3.7.9
MFH: 2026Q3 44bbab19a9 2026-07-18 08:53 Thomas Zander (riggs) · 3.7.8
net/traefik: Update to upstream release 3.7.8
Details:
- Bug-, doc- and security fixes, see
https://github.com/traefik/traefik/releases/tag/v3.7.8
MFH: 2026Q3
Security: https://github.com/traefik/traefik/security/advisories/GHSA-cxjq-mrr5-89rv
https://github.com/traefik/traefik/security/advisories/GHSA-42cj-m3vj-89wv
https://github.com/traefik/traefik/security/advisories/GHSA-qq9q-x9w4-chhj
https://github.com/traefik/traefik/security/advisories/GHSA-8rxv-jg7p-wvg3 e8b169b0e7 2026-07-10 09:54 Dag-Erling Smørgrav (des) · 3.7.6_1
various: Bump go ports for go-1.25.12 / 1.26.5 4ea3547132 2026-07-04 15:51 Thomas Zander (riggs) · 3.7.6
net/traefik: Update to upstream release 3.7.6
Details:
- Bug- and docfixes, see
https://github.com/traefik/traefik/releases/tag/v3.7.6
- Fixes multiple vulnerabilities in the process, see CVE IDs
and release notes linked above.
MFH: 2026Q2
Security: CVE-2026-54763
CVE-2026-54764
CVE-2026-54765 08e9db4121 2026-06-13 22:41 Thomas Zander (riggs) · 3.7.5
net/traefik: Update to upstream release 3.7.5
Details:
- Update to upstream release 3.7.5, see:
https://github.com/traefik/traefik/releases/tag/v3.7.5
- Fixes 2 CVEs in the process, see below
MFH: 2026Q2
Security: CVE-2026-48020
CVE-2026-48491 183293183e 2026-06-03 19:54 Dag-Erling Smørgrav (des) · 3.7.1_1
various: Bump go ports for go-1.25.11 / go-1.26.4 dd8dc2a59d 2026-05-15 00:25 Thomas Zander (riggs) · 3.7.1
net/traefik: Update to upstream release 3.7.1
Details:
- Update to 3.7.x branch, details see:
https://github.com/traefik/traefik/releases/tag/v3.7.1
- Breaking changes are not expected, but double-checking
the migration guide is still recommended:
https://doc.traefik.io/traefik/v3.7/migrate/v3/#v371
MFH: 2026Q2
Security: CVE-2026-44774 db2e3009d5 2026-05-09 19:25 Adam Weinberger (adamw) · 3.6.16_1
various: Bump ports for Go 1.25.10 4e243a83f8 2026-05-09 17:19 Thomas Zander (riggs) · 3.6.16
net/traefik: Update to upstream release 3.6.16
Details:
- Bugfix release, see
https://github.com/traefik/traefik/releases/tag/v3.6.16
MFH: 2026Q2 ded1bd1c63 2026-05-03 09:17 Thomas Zander (riggs) · 3.6.15
net/traefik: Update to upstream release 3.6.15
Details:
- Bugfix release, see:
https://github.com/traefik/traefik/releases/tag/v3.6.15
MFH: 2026Q2 0f27e4aa15 2026-04-13 00:10 Thomas Zander (riggs) · 3.6.13
net/traefik: Update to upstream release 3.6.13
Details:
- Bugfix release, see
https://github.com/traefik/traefik/releases/tag/v3.6.13
MFH: 2026Q2 4837d95797 2026-04-10 17:57 Dag-Erling Smørgrav (des) · 3.6.12_1
various: Bump go ports for go-1.25.9 / 1.26.2 7507e72a84 2026-03-29 10:44 Thomas Zander (riggs) · 3.6.12
net/traefik: Update to upstream release 3.6.12
Details:
- Bugfix release, see
https://github.com/traefik/traefik/releases/tag/v3.6.12
- Includes security fixes:
- BasicAuth/DigestAuth Identity Spoofing via Non-Canonical headerField
- Update dependency for a previously vulnerable gRPC-go implementation
MFH: 2026Q1
Security: CVE-2026-33433
CVE-2026-33186 3c1a911846 2026-03-21 23:08 Thomas Zander (riggs) · 3.6.11
net/traefik: Update to upstream release 3.6.11
Details:
- Bugfix release, see
https://github.com/traefik/traefik/releases/tag/v3.6.11
- Includes security fixes for several vulnerabilities.
CVE-2026-32595 (BasicAuth Middleware Timing Attack)
CVE-2026-32305 (Potential mTLS Bypass via Fragmented TLS ClientHello)
CVE-2026-32695 (Details not yet available)
MFH: 2026Q1
Security: CVE-2026-32595
CVE-2026-32305
CVE-2026-32695 e89149eb3d 2026-03-08 17:51 Thomas Zander (riggs) · 3.6.10
net/traefik: Update to upstream version 3.6.10
Details:
- Bugfix release, see
https://github.com/traefik/traefik/releases/tag/v3.6.10
MFH: 2026Q1 d01300137d 2026-03-06 04:33 Adam Weinberger (adamw) · 3.6.9_1
various: Bump ports for Go 1.25.8 a8d318da7c 2026-02-28 16:16 Thomas Zander (riggs) · 3.6.9
net/traefik: Update to upstream release 3.6.9
Details:
- Bug and documentation fixes, see
https://github.com/traefik/traefik/releases/tag/v3.6.9
MFH: 2026Q1 a2bced47f0 2026-02-14 23:48 Thomas Zander (riggs) · 3.6.8
net/traefik: Ensure the build uses go 1.25 or higher 0682bdf7d4 2026-02-14 18:58 Thomas Zander (riggs) · 3.6.8
net/traefik: Update to upstream release 3.6.8
Details:
- Bugfix release, see
https://github.com/traefik/traefik/releases/tag/v3.6.8
- Includes a fix for CVE-2026-25949, a potential DoS
MFH: 2026Q1
Security: CVE-2026-25949 f164467deb 2026-02-11 20:21 Adam Weinberger (adamw) · 3.6.7_1
various: Bump ports for Go default 1.24->1.25 97685c1886 2026-02-07 12:20 Thomas Zander (riggs) · 3.6.7
net/traefik: Update to upstream release 3.6.7
Details:
- Bugfix release, see
https://github.com/traefik/traefik/releases/tag/v3.6.7
- Addresses a potential DoS vulnerability, see
https://github.com/traefik/traefik/security/advisories/GHSA-cwjm-3f7h-9hwq
- This may require an update to the traefik configuration:
https://doc.traefik.io/traefik/v3.6/migrate/v3/#v367
MFH: 2026Q1
Security: CVE-2026-22045 a18d213f91 2026-02-05 17:48 Adam Weinberger (adamw) · 3.6.6_2
various: Bump Go ports for 1.24.13 529df949a5 2026-01-16 18:49 Adam Weinberger (adamw) · 3.6.6_1
various: Bump Go ports for 1.24.12 013f2d30b0 2025-12-31 15:16 Thomas Zander (riggs) · 3.6.6
net/traefik: Update to upstream release 3.6.6
Details:
- Bugfix release, see
https://github.com/traefik/traefik/releases/tag/v3.6.6 949055d185 2025-12-21 13:06 Thomas Zander (riggs) · 3.6.5
net/traefik: Update to upstream release 3.6.5
Details:
- This contains bug, doc and security fixes, see
- https://github.com/traefik/traefik/releases/tag/v3.6.5
- https://github.com/traefik/traefik/releases/tag/v3.6.4
- https://github.com/traefik/traefik/releases/tag/v3.6.2
- This contains a breaking change regarding encoded request
paths. If special encoded characters are needed, they now
need to be explicitly allowed, see the migration guide:
https://doc.traefik.io/traefik/v3.6/migrate/v3/#v364
Security: CVE-2025-66490
CVE-2025-66491 278f9034fc 2025-12-16 00:06 Dag-Erling Smørgrav (des) · 3.6.2_1
many: Unpin Go ports
* Ports that were pinned to a deprecated version of Go (1.23 or older)
have been unpinned.
* Ports that were pinned to a still-supported version of Go (1.24 or
newer) have been converted to requesting that as their minimum Go
version.
* Ports that had been forcibly deprecated for pinning an expired Go
version have been undeprecated. 75d873b56a 2025-12-03 19:24 Adam Weinberger (adamw) · 3.6.2_1
various: Bump Go ports for 1.24.11 b24429e3ed 2025-11-23 10:45 Thomas Zander (riggs) · 3.6.2
net/traefik: Update to upstream version 3.6.2
Details:
- Move to 3.6 branch
- Release details see:
https://github.com/traefik/traefik/releases/tag/v3.6.2
- For some configurations, modifications might be required,
see the migration guide:
https://doc.traefik.io/traefik/master/migrate/v3/#v360 52260bfa8f 2025-11-11 16:22 Thomas Zander (riggs) · 3.5.6
net/traefik: Update to upstream release 3.5.6
Details:
- Bugfix release, see
https://github.com/traefik/traefik/releases/tag/v3.5.6
MFH: 2025Q4 89320f2fdc 2025-11-06 18:03 Adam Weinberger (adamw) · 3.5.3_3
various: Bump Go ports for 1.24.10 0dfced16fb 2025-10-14 17:13 Adam Weinberger (adamw) · 3.5.3_2
various: Bump go ports for go-1.24.9 90f976619b 2025-10-08 02:41 Adam Weinberger (adamw) · 3.5.3_1
many: Bump dependent ports after go124 update 2e7587aaf8 2025-09-28 19:49 Thomas Zander (riggs) · 3.5.3
net/traefik: Update to upstream release 3.5.3
Details:
- Bug fixes and documentation improvements, see
https://github.com/traefik/traefik/releases/tag/v3.5.3 13ec05619c 2025-09-11 15:18 Thomas Zander (riggs) · 3.5.2
net/traefik: Update to upstream version 3.5.2
Details:
- Start tracking the 3.5.x branch.
- Migration: When using proxyProtocol option for TCP LoadBalancer, a
manual config change must be applied, see
proxyProtocol option for TCP LoadBalancer
MFH: 2025Q3 4da322e9d0 2025-09-04 19:53 Adam Weinberger (adamw) · 3.4.5_2
many: Bump go ports for go-1.24.7 31a5a229a7 2025-08-07 02:02 Adam Weinberger (adamw) · 3.4.5_1
go ports: Bump for 1.24.6 53610681ea 2025-07-27 00:28 Thomas Zander (riggs) · 3.4.5
net/traefik: Update to upstream release 3.4.5
Details:
- Bugfix release, see
https://github.com/traefik/traefik/releases/tag/v3.4.5
MFH: 2025Q3 b847444f03 2025-07-12 13:28 Thomas Zander (riggs) · 3.4.4
net/traefik: Update to upstream release 3.4.4
Details:
- Bugfixes, see
https://github.com/traefik/traefik/releases/tag/v3.4.4
MFH: 2025Q3 8416467964