Releases — RATATOSK

CoreDNSv1.14.2Kubernetes CoreMar 6, 2026

ACTION 1CHECK 2OTHER 7View full analysis

A maintenance release with proxy protocol support, operator-visible behavior changes, and several correctness fixes. It also updates the Go build dependency with cited security fixes and changes ACL-related and query-name handling.

Action needed (1)

securityhighThe Go 1.26.1 build dependency and cited security fixes
The build uses Go 1.26.1, which includes security fixes for CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-25679, and CVE-2026-27142.

Check if affected (2)

securityhighThe rewrite and acl ordering, CVE-2026-26017
Applies if you use both rewrite and acl.
Core reorders rewrite before acl to prevent an ACL bypass. This change addresses CVE-2026-26017.
securityhighplugin/loop query name generation, CVE-2026-26018
Applies if plugin/loop runs.
plugin/loop uses crypto/rand to generate query names. This change addresses CVE-2026-26018.

Source ↗