# CoreDNS v1.15.0

> Kubernetes Core · 2026-10-21

This release adds DNS and plugin capabilities while changing validation and runtime behavior. It also includes correctness, reliability, and security fixes, including an updated Go toolchain.

## Action needed
- **[security · high]** The `Go 1.27.3` build
  - The release is built with `Go 1.27.3`, covering `CVE-2026-56865`, `CVE-2026-56864`, `CVE-2026-33818`, `CVE-2026-97032`, `CVE-2026-78659`, `CVE-2026-97031`, and `CVE-2026-111943`, along with other security fixes.

## Check if affected
- **[breaking]** Conflicting TLS policies on shared listeners
  - Applies if you configure `TLS policies` and `shared listeners`.
  - The core now rejects conflicting TLS policies on shared listeners.
- **[breaking]** Non-final TSIG records rejected by `plugin/tsig`
  - Applies if you use `plugin/tsig`.
  - `plugin/tsig` now rejects non-final TSIG records.

## Other recorded changes
- 63 (defect_corrected 30, added 17, value_changed 11, constraint_changed 5)

[Full analysis](https://ratatosk.io/en/releases/coredns/v1.15.0)

[Original release notes](https://github.com/coredns/coredns/releases/tag/v1.15.0)