BlackTreeLifecycle intelligence
Evidence-linked product lifecycle intelligenceSUPPORT · SECURITY · RETIREMENT
← Lifecycle catalogue
RELEASE NOTESTRAEFIK LABSVERIFIED

PUBLISHER UPDATE · TRAEFIK-3.7.12

TRAEFIK-3.7.12 release notes and known issues

v3.7.12

Scope: Traefik Proxy. This update record adds version, fix and known-issue context. Its publication date is not a lifecycle boundary.

Summary

Important: Please read the migration guide . CVE fixed: Advisory GHSA-cjr6-pf59-jq29 Advisory GHSA-7ghq-v6jf-g56c Advisory GHSA-rf44-j88r-hh8c Bug fixes: [fastproxy] Bump github.com/valyala/fasthttp to v1.73.0 ( #13769 @mmatur ) [file] Include the filename in file provider configuration errors ( #13527 @lazerg ) [http3] Apply read timeout, idle timeout, and max header bytes for HTTP/3 ( #13717 @gndz07 ) [k8s] Fix typos in docs and an OCSP log message ( #13722 @MsfPablo ) [k8s, k8s/ingress-nginx] Fix redirect www host with a non-numeric port ( #13708 @mmatur ) [k8s/ingress-nginx] Fix TLS option name collision across namespaces in the ingress-nginx provider ( #13721 @gndz07 ) [server] Add an entry point option to handle request headers with aliasing names ( #13720 @rtribotte ) [tcp, udp] Reject negative weights in TCP and UDP weighted services ( #13749 @rtribotte ) Bump etcd client modules to v3.5.33 ( #13756 @mmatur ) Documentation: [k8s] Update redirections block reference in basic.md ( #13723 @Larzenegger ) [k8s] Fix formatting in Kubernetes setup guide ( #13742 @stefkiourk ) [security] Document the security threat model and settled security decisions ( #13740 @emilevauge ) [service] Clarify ServersTransport behavior for the errors middleware in Kubernetes ( #13531 @lazerg ) Fix v3.7.11 migration guide ( #13730 @gndz07 ) Move Jean-Baptiste Doumenjou and Mathieu Lonjaret to past maintainers ( #13736 @emilevauge ) Reduce SECURITY.md to a pointer to the security documentation ( #13732 @emilevauge ) Update end of support dates ( #13712 @nmengin )

Improvements and security content

  • Important: Please read the migration guide . CVE fixed: Advisory GHSA-cjr6-pf59-jq29 Advisory GHSA-7ghq-v6jf-g56c Advisory GHSA-rf44-j88r-hh8c Bug fixes: [fastproxy] Bump github.com/valyala/fasthttp to v1.73.0 ( #13769 @mmatur ) [file] Include the filename in file provider configuration errors ( #13527 @lazerg ) [http3] Apply read timeout, idle timeout, and max header bytes for HTTP/3 ( #13717 @gndz07 ) [k8s] Fix typos in docs and an OCSP log message ( #13722 @MsfPablo ) [k8s, k8s/ingress-nginx] Fix redirect www host with a non-numeric port ( #13708 @mmatur ) [k8s/ingress-nginx] Fix TLS option name collision across namespaces in the ingress-nginx provider ( #13721 @gndz07 ) [server] Add an entry point option to handle request headers with aliasing names ( #13720 @rtribotte ) [tcp, udp] Reject negative weights in TCP and UDP weighted services ( #13749 @rtribotte ) Bump etcd client modules to v3.5.33 ( #13756 @mmatur ) Documentation: [k8s] Update redirections block reference in basic.md ( #13723 @Larzenegger ) [k8s] Fix formatting in Kubernetes setup guide ( #13742 @stefkiourk ) [security] Document the security threat model and settled security decisions ( #13740 @emilevauge ) [service] Clarify ServersTransport behavior for the errors middleware in Kubernetes ( #13531 @lazerg ) Fix v3.7.11 migration guide ( #13730 @gndz07 ) Move Jean-Baptiste Doumenjou and Mathieu Lonjaret to past maintainers ( #13736 @emilevauge ) Reduce SECURITY.md to a pointer to the security documentation ( #13732 @emilevauge ) Update end of support dates ( #13712 @nmengin )

Known issues

Publisher statement

Not stated. The verified publisher record does not contain a known-issues statement.

Affected products and versions

Products

  • Traefik Proxy

Affected versions

  • 3.7.12
  • 1.73.0
  • 3.5.33
  • 3.7.11

Fixed versions or updates

  • No fixed version is stated in this record.

Recommended action

Review the official publisher document before deployment.

Official publisher evidence