Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package traefik for openSUSE:Factory checked in at 2026-10-07 19:35:09 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/traefik (Old) and /work/SRC/openSUSE:Factory/.traefik.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "traefik" Wed Oct 7 19:35:09 2026 rev:59 rq:1382974 version:3.7.13 Changes: -------- --- /work/SRC/openSUSE:Factory/traefik/traefik.changes 2026-08-27 18:57:08.088743114 +0200 +++ /work/SRC/openSUSE:Factory/.traefik.new.3698736/traefik.changes 2026-10-07 19:36:06.263438125 +0200 @@ -1,0 +2,59 @@ +Wed Sep 23 04:53:15 UTC 2026 - Daniel Mulzer <[email protected]> + +- Version 3.7.13 + + Please read the migration guide: + https://doc.traefik.io/traefik/v3.7/migrate/v3/#v3713 + + CVEs fixed + * CVE-2026-88004 (Advisory GHSA-v67p-phpq-fc8x) + * CVE-2026-88007 (Advisory GHSA-qqjf-53cj-pwvv) + * CVE-2026-88008 (Advisory GHSA-w4v4-9rw7-5326) + * CVE-2026-88009 (Advisory GHSA-f52w-8j3h-j724) + * CVE-2026-88010 (Advisory GHSA-8fcf-v89g-xpg6) + + Bugs fixed + * acme + - Bump github.com/go-acme/lego/v5 to v5.4.1 + - Disable recursive nss propagation by default for the DNS challenge + - Do not require recursive nameservers propagation by default for the + DNS-01 challenge + * acme, tls + - Ignore negated matchers when parsing rule domains + * consulcatalog, nomad + - Build a collision-free item key in the Consul Catalog and Nomad providers + * http3 + - Dedicate a transport per HTTP/3 client connection + * k8s/ingress-nginx + - Fix sticky cookie expiration per request + - Create HTTP redirect router for ssl-passthrough with force-ssl-redirect + - Preserve leading dot in sticky session cookie Domain attribute + * logs, middleware + - Set access log entry level and time before formatting the OTLP body + * logs, tls, k8s/crd + - Downgrade default TLS resources namespace mismatch log to warning + * middleware + - Fix {url} placeholder in customErrors middleware to include the correct + scheme + * middleware, authentication + - Prevent user enumeration through the basic auth singleflight key + * server + - Build the configuration copy once per change + - Do not forward h2c upgrade headers to the backend + - Deny request with an opaque request target + - Do not forward request trailer values to the backend + - Bump github.com/quic-go/quic-go to v0.62.0 + * tls + - Redact duplicate TLS certificates in provider merge logs + * webui + - Fix displayed number on details pages + + Documentation + * k8s + - Add warning about Ingress API frozen state + - Remove namespace reference for providers.kubernetesGateway.labelSelector + * k8s/crd + - Fix broken redirect for the Kubernetes CRD reference docs + * Tell scanning agents to read the security policy and decisions pages + +------------------------------------------------------------------- Old: ---- traefik-v3.7.12.src.tar.gz New: ---- traefik-v3.7.13.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ traefik.spec ++++++ --- /var/tmp/diff_new_pack.fEwMAN/_old 2026-10-07 19:36:08.276522288 +0200 +++ /var/tmp/diff_new_pack.fEwMAN/_new 2026-10-07 19:36:08.279522414 +0200 @@ -23,7 +23,7 @@ %define buildmode pie %endif Name: traefik -Version: 3.7.12 +Version: 3.7.13 Release: 0 Summary: The Cloud Native Application Proxy License: MIT ++++++ traefik-v3.7.12.src.tar.gz -> traefik-v3.7.13.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/traefik/traefik-v3.7.12.src.tar.gz /work/SRC/openSUSE:Factory/.traefik.new.3698736/traefik-v3.7.13.src.tar.gz differ: char 11, line 1 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/traefik/vendor.tar.gz /work/SRC/openSUSE:Factory/.traefik.new.3698736/vendor.tar.gz differ: char 13, line 1
