Traefik has released v2.11.54, a patch version for the v2.11 branch that focuses on bug fixes and dependency upgrades. This release addresses a critical issue in the Kubernetes CRD provider and refreshes key libraries to improve tracing and compression behavior.
Here are the concrete changes in this release:
- Bug fixes:
- [k8s/crd] Fix cross-namespace service reference check: The Kubernetes CRD provider now correctly validates that
servicereferences in IngressRoute and Middleware CRDs are in the same namespace as the resource, preventing unintended access and misrouting. (#13573, @gndz07) - [tracing] Bump
github.com/DataDog/dd-trace-go/v2to 2.8.1: This update for Datadog tracing ensures compatibility with newer trace agents and improves span handling. (#13530, @kevinpollet) - Dependency bumps for security and stability:
golang.org/x/textto v0.40.0 andgolang.org/x/netto v0.57.0 — these address potential vulnerabilities and bring in upstream fixes. (#13574, @mmatur)github.com/klauspost/compressto v1.18.7 — improves compression performance and fixes edge cases in response gzip handling. (#13587, @mmatur)
- [k8s/crd] Fix cross-namespace service reference check: The Kubernetes CRD provider now correctly validates that
For developers running Traefik in Kubernetes environments, the CRD cross-namespace fix is particularly important. Previously, a misconfigured CRD could reference services in another namespace, potentially leaking traffic or causing routing errors. Now, Traefik enforces namespace boundaries, aligning with expected security practices.
The dependency bumps, while routine, are crucial. The x/net and x/text updates close known security gaps in handling HTTP/2 and Unicode strings. The klauspost/compress update ensures more reliable compression when using middlewares like compress.
Upgrade to v2.11.54 to get these fixes. As always, test in a staging environment first, especially if you heavily rely on Kubernetes CRDs or Datadog tracing. The release is backward-compatible; no configuration changes are required.
Source: https://github.com/traefik/traefik/releases/tag/v2.11.54