The open-source edge router Traefik has released version 2.11.51, a patch update addressing a critical bug in TCP routing and bringing dependency upgrades. This release is recommended for all users running v2.11.x.
The key fix resolves a connection leak that occurred when using TCP routers with TLS termination. After handling a request, the underlying connection was not properly closed, leading to resource exhaustion over time. The fix ensures connections are correctly released back to the pool.
Additional changes:
- TCP router fix: Resolved issue
#10709where TCP connections were not properly closed after use, causing a leak. - Dependency updates: Upgraded
golang.org/x/netto address a DNS resolution vulnerability (CVE-2024-45338) andgithub.com/docker/dockerto patch a container escape issue.
For developers deploying Traefik in production, this release is especially important for those using TCP routing (e.g., for databases, MQTT, or custom protocols). The connection leak could have caused degraded performance or unexpected downtime under load. Upgrading via docker pull traefik:v2.11.51 or updating your package manager is straightforward and backward-compatible.
As always, Traefik maintains a stable v2.11.x branch with only critical patches. This release follows the project's model of separate version lines (v2 and v3), ensuring that users can stay on the LTS-like v2.11 branch without feature churn. Check the full changelog for a complete list of dependency bumps.
Source: https://github.com/traefik/traefik/releases/tag/v2.11.51