CoreDNS
v1.14.1Kubernetes CoreJan 16, 2026
CoreDNS v1.14.1 primarily addresses security vulnerabilities in supported Go versions. It also improves proxy connection-pool performance and adds the forward plugin's `max_idle_conns` parameter.
Action needed (1)
securityhighCVE-2025-68119 vulnerability fix
The release also addresses CVE-2025-68119.
Check if affected (1)
securitycriticalGo vulnerability fixes for CVE-2025-61728, CVE-2025-61726, CVE-2025-68121, and CVE-2025-61731
Applies if your CoreDNS build uses Go versions prior to
Go 1.or25. 6 Go 1..24. 12 This release addresses vulnerabilities affecting Go versions prior to
Go 1.and25. 6 Go 1., including CVE-2025-61728, CVE-2025-61726, CVE-2025-68121, and CVE-2025-61731.24. 12
All 2 other recorded changesadditions 1 · value changes 1
additions (1)
- Add
max_idle_connsparameter. By default set to 0 (unbounded).
value changes (1)
- This design serialized all connection acquisition and release operations through a single goroutine, creating a bottleneck under high concurrency.
Add CoreDNS to your stack
A weekly email arrives when a release needs action. Like the security patches in this release.