Traefik v2.11.61 releases security dependency updates and server fixes

Traefik, the cloud-native edge router, has released version 2.11.61 to address several bugs and update critical dependencies. This release focuses on improving server stability and security through dependency bumps and new configuration options.

Users managing complex authentication environments or high-traffic entry points will benefit from fixes related to connection leaks and header management. The update also includes essential updates to the ACME implementation and networking libraries used by the router.

Technical improvements in Traefik v2.11.61

• Server Security: A new entry point option has been added that allows administrators to limit the total number of request header values, providing better protection against certain types of resource exhaustion.
• Authentication Stability: The release fixes a backend connection leak specifically affecting environments utilizing NTLM and Kerberos authentication protocols.
• Dependency Updates: The ACME implementation has been updated by bumping github.com/go-jose/go-jose/v4 to version 4.1.6, and the golang.org/x/net library has been updated to v0.62.0.
• Migration Requirement: The maintainers have issued an important notice for users to consult the migration guide associated with this release.

Why it matters

This update is significant for DevOps engineers and system administrators running Traefik in enterprise environments that rely on Windows-based authentication (NTLM/Kerberos). The new header limiting capability enhances the ability to harden edge routers against malicious request patterns in cloud-native architectures.