Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package traefik for openSUSE:Factory checked
in at 2025-06-06 22:44:56
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/traefik (Old)
and /work/SRC/openSUSE:Factory/.traefik.new.19631 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "traefik"
Fri Jun 6 22:44:56 2025 rev:34 rq:1283679 version:3.4.1
Changes:
--------
--- /work/SRC/openSUSE:Factory/traefik/traefik.changes 2025-04-22
17:30:26.092504671 +0200
+++ /work/SRC/openSUSE:Factory/.traefik.new.19631/traefik.changes
2025-06-06 22:45:42.635402554 +0200
@@ -1,0 +2,64 @@
+Fri Jun 6 13:26:41 UTC 2025 - Johannes Weberhofer <jweberho...@weberhofer.at>
+
+- Removed manual download service and manual checksum verification
+
+-------------------------------------------------------------------
+Fri Jun 6 08:48:27 UTC 2025 - Johannes Weberhofer <jweberho...@weberhofer.at>
+
+- Version 3.4.1
+
+ - fix for CVE-2025-47952 boo#1243818
+ - docker
+ * Do not warn network missing if connected to a container network
+ (#11698 by holysoles)
+ - k8s/crd
+ * Fix CEL validation for RootCA in ServersTransport (#11775 by rtribotte)
+ - middleware
+ * Scope the rate limit counter key by source and by middleware
+ (#11753 by aromeyer)
+ - server
+ * Use routing path in v3 matchers (#11790 by kevinpollet)
+ - service
+ * Make P2C strategy thread-safe (#11762 by lbenguigui)
+ - webui
+ * Do not display RemoveHeader option when not defined (#11782 by
kevinpollet)
+
+-------------------------------------------------------------------
+Tue May 13 04:44:40 UTC 2025 - Eric Torres <eric.tor...@its-et.me>
+
+- Important: please read the migration guide in regards to v3.4.0 changes
+
+- Version 3.4.0 changes
+ - acme
+ * Add acme.profile and acme.emailAddresses options (#11597 by ldez)
+ - docker,ecs,docker/swarm,consulcatalog,nomad
+ * Allow configuring server URLs with label providers (#11374 by yelvert)
+ - k8s/crd
+ * Improve CEL validation on Ingress CRD resources (#11311 by mloiseleur)
+ * Remove default load-balancing strategy from CRD (#11701 by kevinpollet)
+ * Restrict regex validation of HTTP status codes for Ingress CRD resources
(#11670 by jnoordsij)
+ - k8s/gatewayapi
+ * Set rule priority in Gateway API TLSRoute (#11443 by augustozanellato)
+ - k8s/ingress
+ * Add ingress status for ClusterIP and NodePort Service Type (#11100 by
mlec1)
+ - middleware,authentication
+ * Add option to preserve request method in forwardAuth (#11473 by an09mous)
+ - middleware
+ * Support rewriting status codes in error page middleware (#11520 by
sevensolutions)
+ * Add Redis rate limiter (#10211 by longquan0104)
+ - service
+ * Add p2c load-balancing strategy for servers load-balancer (#11547 by
rtribotte)
+ - sticky-session
+ * Support domain configuration for sticky cookies (#11556 by jleal52)
+ - tls,k8s/crd,service
+ * Allow root CA to be added through config maps (#11475 by Nelwhix)
+ - tls
+ * Add support to disable session ticket (#11609 by avdhoot)
+ - udp
+ * Add support for UDP routing in systemd socket activation (#11022 by
tsiid)
+ - webui
+ * Add auto webui theme option and default to it (#11455 by zizzfizzix)
+ - Replace experimental maps and slices with stdlib (#11350 by Juneezee)
+ - Bump github.com/redis/go-redis/v9 to v9.7.3 (#11687 by kevinpollet)
+
+-------------------------------------------------------------------
@@ -10,0 +75,3 @@
+- fix for boo#1239233 CVE-2025-22868
+- fix for boo#1241731 CVE-2025-22872
+
@@ -14,0 +82,2 @@
+- fix for boo#1237636 CVE-2025-27144
+- fix for boo#1239383 CVE-2025-22869
@@ -48,0 +118,3 @@
+- Upgrade fixed boo#1235167
+- Package mentioned in boo#1235270 CVE-2024-45338 has been upgraded
+
@@ -136,0 +209 @@
+ - Fix for boo#1234513 CVE-2024-4533
Old:
----
traefik-v3.3.6.src.tar.gz
New:
----
traefik-v3.4.1.src.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ traefik.spec ++++++
--- /var/tmp/diff_new_pack.XhSG8c/_old 2025-06-06 22:45:46.663569491 +0200
+++ /var/tmp/diff_new_pack.XhSG8c/_new 2025-06-06 22:45:46.687570486 +0200
@@ -23,7 +23,7 @@
%define buildmode pie
%endif
Name: traefik
-Version: 3.3.6
+Version: 3.4.1
Release: 0
Summary: The Cloud Native Application Proxy
License: MIT
++++++ _service ++++++
--- /var/tmp/diff_new_pack.XhSG8c/_old 2025-06-06 22:45:47.071586400 +0200
+++ /var/tmp/diff_new_pack.XhSG8c/_new 2025-06-06 22:45:47.095587395 +0200
@@ -1,6 +1,5 @@
<services>
- <service name="download_files" mode="manual">
- </service>
+ <service name="download_files" mode="manual" />
<service name="go_modules" mode="manual">
<param name="archive">traefik*.src.tar.gz</param>
<param name="basename">./</param>
++++++ traefik-v3.3.6.src.tar.gz -> traefik-v3.4.1.src.tar.gz ++++++
/work/SRC/openSUSE:Factory/traefik/traefik-v3.3.6.src.tar.gz
/work/SRC/openSUSE:Factory/.traefik.new.19631/traefik-v3.4.1.src.tar.gz differ:
char 19, line 1
++++++ traefik.yml ++++++
--- /var/tmp/diff_new_pack.XhSG8c/_old 2025-06-06 22:45:47.575607288 +0200
+++ /var/tmp/diff_new_pack.XhSG8c/_new 2025-06-06 22:45:47.611608780 +0200
@@ -56,6 +56,10 @@
# Set traefik's log-level
# Default: ERROR
#level: DEBUG
+ #
+ # Set a filePath if you want to send traefik logs to a file instead of
+ # the systemd journal. Access logs are handled seperately
+ #filePath: /var/log/traefik/traefik.log
# ------------------------------------------------------------------------
@@ -65,9 +69,9 @@
# ------------------------------------------------------------------------
#accessLog:
# ------------------------------------------------------------------------
- # Set the filepath for the traefik log-file.
+ # Set the filepath for the access log file.
# Default: os.Stdout
- #filePath: /var/log/traefik/traefik.log
+ #filePath: /var/log/traefik/access.log
# ------------------------------------------------------------------------
# Write logs in the 'common' or 'json' format.
# Default: common
@@ -150,5 +154,11 @@
# storage: /var/lib/traefik/acme.json
# httpChallenge:
# entryPoint: web
+# acmeDnsResolver:
+# acme:
+# email: "??@??.??"
+# storage: /var/lib/traefik/acme-dns.json
+# dnsChallenge:
+# provider: ???????
++++++ vendor.tar.gz ++++++
/work/SRC/openSUSE:Factory/traefik/vendor.tar.gz
/work/SRC/openSUSE:Factory/.traefik.new.19631/vendor.tar.gz differ: char 13,
line 1
