v3.7.9
Changed 1
- Bump google.golang.org/grpc to v1.82.1
Fixed 5
- Fix redirect with use-regex in IngressNGINX provider
- Disable Zstd support in the gzhttp wrapper
- Defer the CONNECT payload until the backend accepts the tunnel
- Discard CONNECT body in forwardauth and reject CONNECT requests with fast proxy
- Do not add back CONNECT requests to the pool
Security 1
- Fix advisory GHSA-3ccp-42pg-hgv6
Important: Please read the migration guide.
CVE fixed:
- Advisory GHSA-3ccp-42pg-hgv6
Bug fixes:
- [k8s/ingress-nginx] Fix redirect with use-regex in IngressNGINX provider (#13476 @AmariahAK)
- [middleware] Disable Zstd support in the gzhttp wrapper (#13533 @kevinpollet)
- [server] Defer the CONNECT payload until the backend accepts the tunnel (#13542 @sdelicata)
- [server] Discard CONNECT body in forwardauth and reject CONNECT requests with fast proxy (#13543 @sdelicata)
- [server] Bump google.golang.org/grpc to v1.82.1 (#13551 @piscue)
- [server] Do not add back CONNECT requests to the pool (#13556 @kevinpollet)
Documentation: