v2.11.53
Changed 1
- Bump google.golang.org/grpc to v1.82.1
Fixed 3
- Add missing ErrorRequestHeaders field to CRDs
- Defer the CONNECT payload until the backend accepts the tunnel
- Do not add back CONNECT requests to the pool
Security 1
- Fix CVE-2024-45409 in advisory GHSA-3ccp-42pg-hgv6
Important: Please read the migration guide.
CVE fixed:
- Advisory GHSA-3ccp-42pg-hgv6
Bug fixes:
- [middleware, k8s/crd] Add missing ErrorRequestHeaders field to CRDs (#13498 @kevinpollet)
- [server] Defer the CONNECT payload until the backend accepts the tunnel (#13542 @sdelicata)
- [server] Bump google.golang.org/grpc to v1.82.1 (#13551 @piscue)
- [server] Do not add back CONNECT requests to the pool (#13556 @kevinpollet)
Documentation:
- Add a migration note for CONNECT requests (#13554 @kevinpollet)