[ANNOUNCE] haproxy-ingress v0.16.0-beta.1

5 views
Skip to first unread message

Joao Morais

unread,
Oct 15, 2025, 8:00:15 AM10/15/25
to haproxy...@googlegroups.com
HAProxy Ingress v0.16.0-beta.1 is here!

This is the first beta version of the v0.16 branch. It updates the
embedded haproxy version, which fixes CVE-2025-11230, see HAProxy
release notes https://www.mail-archive.com/hap...@formilux.org/msg46190.html
. Other issues were also found and fixed:

- Artyom found the fronting-proxy configuration overwriting the
`X-Forwarded-Proto` header when both the fronting proxy and the
regular HTTP shares the same TCP port number.
- Lua response was broken if more than one custom response need to be
handled to the same HTTP response code.

Changes in dependencies:

- embedded haproxy from 2.8.15 to 2.8.16
- controller-runtime from v0.22.1 to v0.22.3
- go from 1.25.1 to 1.25.3

Links and refs of this release:

* Changelog: https://github.com/jcmoraisjr/haproxy-ingress/blob/master/CHANGELOG/CHANGELOG-v0.16.md#v0160-beta1
* GitHub release:
https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.16.0-beta.1
* Release date: 2025-10-15
* Helm chart: --version 0.16.0-beta.1 --devel
* Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.16.0-beta.1
* Image (Docker Hub): docker.io/jcmoraisjr/haproxy-ingress:v0.16.0-beta.1
* Embedded HAProxy version: 2.8.16

New features and improvements since v0.16.0-alpha.2:

* Bump sigs.k8s.io/controller-runtime from 0.22.1 to 0.22.2 [#1309]
(dependabot[bot])
* update dependencies [0613cc5] (Joao Morais)
* Bump sigs.k8s.io/controller-runtime from 0.22.2 to 0.22.3 [#1312]
(dependabot[bot])
* update go from 1.25.1 to 1.25.3 [1826091] (Joao Morais)
* update embedded haproxy from 2.8.15 to 2.8.16 [d6c28b4] (Joao Morais)

Fixes since v0.16.0-alpha.2:

* fix xfp header on fronting proxy shared port [#1310] (jcmoraisjr)
* fix lua http response having two or more options [#1311] (jcmoraisjr)
Reply all
Reply to author
Forward
0 new messages