< back to search

shield Recommended update for caddy
openSUSE-2025-138

This update for caddy fixes the following issues: Update to version 2.10.0 * caddytls: Allow missing ECH meta file * caddytls: Prefer managed wildcard certs over individual subdomain certs (#6959) * caddytls: Add remote_ip to HTTP cert manager (close #6952) * build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 (#6960) * caddyauth: Set authentication provider error in placeholder (#6932) * go.mod: Upgrade acmez and certmagic * admin: Remove host checking for UDS (close #6832) * reverseproxy: Add valid Upstream to DialInfo in active health checks (#6949) * Fix the incorrect parameter order (#6951) * chore: fix comment (#6950) * caddyhttp: Document side effect of HTTP/3 early data (close #6936) * go.mod: Upgrade to libdns 1.0 beta APIs (requires upgraded DNS providers) * events: Refactor; move Event into core, so core can emit events (#6930) * caddytls: Temporarily treat "" and "@" as equivalent for DNS publication * go.mod: Upgrade CertMagic * go.mod: Minor dependency upgrades * caddytls: Don't publish HTTPS record for CNAME'd domain (fix #6922) * core: add modular `network_proxy` support (#6399) * update quic-go to v0.50.1 (#6918) * chore: Modernize a couple for loops * caddytls: Initialize permission module earlier (fix #6901) * caddyfile: Fix formatting for backquote wrapped braces (#6903) * caddytls: Convert AP subjects to punycode * caddytls: Don't publish ECH configs if other records don't exist * requestbody: Fix ContentLength calculation after body replacement (#6896) * requestbody: Add set option to replace request body (#5795) * headers: Allow nil HeaderOps (fix #6893) * caddytls: Minor fixes for ECH * caddytls: Fix TrustedCACerts backwards compatibility (#6889) * caddytls: Pointer receiver (fix #6885) * caddyfile: add error handling for unrecognized subdirective/options in various modules (#6884) * reverseproxy: more comments about buffering and add new tests (#6778) * chore: Remove unnecessary explicit type parameters * caddytls: Reorder provisioning steps (fix #6877) * ci: fix Go matrix (#6846) * caddytls: Only make DNS solver if not already set (fix #6880) * cmd: Promote undo maxProcs func to caller * cmd: Only set memory/CPU limits on run (fix #6879) * caddypki: Remove lifetime check at Caddyfile parse (fix #6878) * go.mod: Upgrade dependencies * caddytls: Fix broken refactor * caddytls: Enhance ECH documentation * Update min go version in readme * readme: update Twitter name and link (#6874) * build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#6876) * caddytls: Encrypted ClientHello (ECH) (#6862) * build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 (#6871) * chore: upgrade cobra (#6868) * Fix typo in TLS group x25519mlkem768 * caddytest: Support configuration defaults override (#6850) * chore: update quic-go to v0.50.0 (#6854) * go.mod: remove glog dependency (#6838) * chore: ci: upgrade Go version to 1.24 (#6839) * tests: tests for error handling & metrics in admin endpoints (#6805) * caddytls: Support post-quantum key exchange mechanism X25519MLKEM768 * file_server: use the UTC timezone for modified time (#6830) * Revert "logging: Always set fields func; fix #6829" * logging: Always set fields func; fix #6829 * admin: fix index validation for PUT requests (#6824) * reverseproxy: ignore duplicate collector registration error (#6820) * build(deps): bump github.com/golang/glog from 1.2.2 to 1.2.4 (#6814) * fix: update broken link to Ardan Labs (#6800) * reverse_proxy: re-add healthy upstreams metric (#6806) * caddytls: Refactor sni matcher (#6812) * cmd: automatically set GOMEMLIMIT (#6809) * caddyhttp: ResponseRecorder sets stream regardless of 1xx * caddytls: Fix sni_regexp matcher to obtain layer4 contexts (#6804) * chore: don't use deprecated `archives.format_overrides.format` (#6807) * chore: update quic-go to v0.49.0 (#6803) * go.mod: Upgrade CertMagic to v0.21.7 * reverseproxy: Via header (#6275) * logging: Fix crash if logging error is not HandlerError (#6777) * caddytls: Initial support for ACME profiles * fastcgi: improve parsePHPFastCGI docs (#6779)

  • Release Date
    Apr 28 2025
  • References
  • Type
    recommended
  • Severity
    moderate

cloud_download Downloads

SUSE Package Hub 15.6 x86_64
SUSE Package Hub 15.6 aarch64
SUSE Package Hub 15.6 s390x
SUSE Package Hub 15.6 ppc64le