Releases — RATATOSK

CoreDNSv1.14.7Kubernetes CoreAug 19, 2026

ACTION 1CHECK 3OTHER 42View full analysis

A maintenance release with a Go toolchain update that includes disclosed CVE fixes, an ACL-check bypass correction, and changes to operator-visible defaults. It also adds features and corrects defects across the DNS server.

Action needed (1)

securityhighGo 1.26.6 security fixes
The release is built with Go 1.26.6, including fixes for CVE-2026-56865, CVE-2026-56864, and CVE-2026-33818.

Check if affected (3)

securityplugin/acl autopath ACL checks
Applies if you use plugin/acl and autopath.
The plugin/acl plugin fixes autopath bypassing ACL checks. This correction ships in the ACL plugin.
breakingplugin/forward default connection attempts
Applies if you use plugin/forward.
The plugin/forward plugin caps the default number of connection attempts. This default change ships in the forward plugin.
breakingplugin/hosts unsupported-type fallthrough
Applies if you use plugin/hosts.
The plugin/hosts plugin makes fallthrough for unsupported types opt-in. This default change ships in the hosts plugin.

Source ↗