v2.11.56

nari-labs/dia2v2.11.56Aug 26, 2026by github-actions[bot]

Upgrading?

AI Summary

A patch release for Traefik v2.11 addressing specific security vulnerabilities and bug fixes, including HTTP/3 timeouts, entry point header handling, and TCP/UDP weight validation.

Key Highlights

  • Fixed security advisories (GHSA-7ghq-v6jf-g56c, GHSA-rf44-j88r-hh8c).
  • Applied HTTP/3 read timeout, idle timeout, and max header bytes.
  • Added entry point option to handle request headers with aliasing names.
  • Fixed rejection of negative weights in TCP and UDP weighted services.
  • Bumped etcd client modules to v3.5.33.

New Features

  • HTTP/3 timeout improvements.
  • Entry point header aliasing handling.
  • TCP and UDP weight validation.
  • Updated etcd client modules.

Full Release Notes

**Important:** Please read the [migration guide](https://doc.traefik.io/traefik/v2.11/migration/v2/#v21156).

**CVE fixed:**
- Advisory [GHSA-7ghq-v6jf-g56c](https://github.com/traefik/traefik/security/advisories/GHSA-7ghq-v6jf-g56c)
- Advisory [GHSA-rf44-j88r-hh8c](https://github.com/traefik/traefik/security/advisories/GHSA-rf44-j88r-hh8c)

**Bug fixes:**
- **[http3]** Apply read timeout, idle timeout, and max header bytes for HTTP/3 ([#13717](https://github.com/traefik/traefik/pull/13717) @gndz07)
- **[server]** Add an entry point option to handle request headers with aliasing names ([#13720](https://github.com/traefik/traefik/pull/13720) @rtribotte)
- **[tcp, udp]** Reject negative weights in TCP and UDP weighted services ([#13749](https://github.com/traefik/traefik/pull/13749) @rtribotte)
- Bump etcd client modules to v3.5.33 ([#13756](https://github.com/traefik/traefik/pull/13756) @mmatur)

Related Repositories