Hi everyone,
We have released new security updates for Traefik Proxy: 2.11.61 and 3.7.17.
These releases fix the following security advisory (only 2.11.58 to 2.11.60 and 3.7.14 to 3.7.16 are affected; Traefik 3.6 and earlier are not affected):
- [High] GHSA-xv5x-242w-7hf7: an unauthenticated client could make Traefik keep a dedicated backend connection and its resources for every client connection by sending an NTLM or Negotiate Authorization header, exhausting the memory of the process. Fixed in 2.11.61 and 3.7.17.
Per-connection backend transport leak from unauthenticated Negotiate/NTLM headers · Advisory · traefik/traefik · GitHub
Release notes:
We strongly recommend upgrading as soon as possible.
The Traefik team