This update for coredns fixes the following issues:
Changes in coredns:
- Bump vendored google.golang.org/grpc from 1.83.0 to 1.83.1:
* CVE-2026-84304: heap memory exhaustion via HTTP/2 DATA frame
fragmentation in the gRPC transport (boo#1279216)
* Done through the go_modules "require" parameter in _service
- Update license tag to Apache-2.0 AND MPL-2.0
* outcome of legal review
Update to version 1.14.6:
* Test: populating build test failure
* fix(auto): keep first matching zone file for duplicate origins
* plugin/secondary: serve catalog member zones
* plugin/tsig: don't echo client's TSIG.Error if verification is suc
This update for coredns fixes the following issues:
Changes in coredns:
- Update to version 1.14.7:
* plugin/acl, plugin/cache, plugin/file, plugin/forward, plugin/kubernetes:
assorted correctness fixes (stale-cache races, AXFR zone contamination,
DoH health-check TLS config, failover counter reset, ACL bypass via
autopath).
* New: plugin/shed (UDP overload protection), plugin/tls (ACME DNS-01),
plugin/timeouts maxtcpqueries, DoQ connection-level concurrency limits.
- CVE-2026-41178: go.opentelemetry.io/otel/baggage header parsing did not
reject excessively large raw values, allowing a denial of service via
oversized
This update for coredns fixes the following issues:
Changes in coredns:
- Update to version 1.14.2:
* plugin/reload: Allow disabling jitter with 0s
* bump deps
* plugin/forward: fix parsing error when handling TLS+IPv6 address
* plugin/loop: use crypto/rand for query name generation
* plugin: reorder rewrite before acl to prevent bypass
* fix(rewrite): fix cname target rewrite for CNAME chains
* fix(kubernetes): panic on empty ListenHosts
* chore: bump minimum Go version to 1.25
* feat(proxyproto): add proxy protocol support
* refactor(cache): modernize with generics
* Add metadata for response Type and Class to Log
This update for coredns fixes the following issues:
Changes in coredns:
- fix CVE-2025-68156 bsc#1255345
- fix CVE-2025-68161 bsc#1256411
- Update to version 1.14.0:
* core: Fix gosec G115 integer overflow warnings
* core: Add regex length limit
* plugin/azure: Fix slice init length
* plugin/errors: Add optional show_first flag to consolidate directive
* plugin/file: Fix for misleading SOA parser warnings
* plugin/kubernetes: Rate limits to api server
* plugin/metrics: Implement plugin chain tracking
* plugin/sign: Report parser err before missing SOA
* build(deps): bump github.com/expr-lang/expr from 1.17.6 to 1.17.7
- U