FlawAtlas
Search the atlas
OPENSUSE-SU-2026:20703-1 Not scored

Security update for coredns

This update for coredns fixes the following issues: Changes in coredns: - Update to version 1.14.3: * This release introduces Windows service support, along with full TSIG verification across DoH, DoH3, QUIC, and gRPC transports, and improved TSIG propagation and DoH request validation. * It also adds optional TLS for the metrics endpoint. * Performance and stability are improved through cache prefetching, QUIC optimizations, and a new max_age option in the forward plugin. * Additional updates include enhanced SVCB/HTTPS support, improved zone transfer behavior, and various DNSSEC, PROXY protocol, and concurrency fixes. * The release is built with Go 1.26.2, which includes security fixes addressing CVE-2026-32282, CVE-2026-32289, CVE-2026-33810, CVE-2026-27144, CVE-2026-27143, CVE-2026-32288, CVE-2026-32283, and CVE-2026-27140, and also includes fixes for CVE-2026-32936, CVE-2026-33190, CVE-2026-33489, CVE-2026-32934, and CVE-2026-35579.

Exploit probability Not scored
Published May 6, 2026
Required by Not available
Last source change May 9, 2026

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities openSUSE-SU-2026:20703-1

This update for coredns fixes the following issues: Changes in coredns: - Update to version 1.14.3: * This release introduces Windows service support, along with full TSIG verification across DoH, DoH3, QUIC, and gRPC transports, and improved TSIG propagation and DoH request validation. * It also adds optional TLS for the metrics endpoint. * Performance and stability are improved through cache prefetching, QUIC optimizations, and a new max_age option in the forward plugin. * Additional updates include enhanced SVCB/HTTPS support, improved zone transfer behavior, and various DNSSEC, PROXY protocol, and concurrency fixes. * The release is built with Go 1.26.2, which includes security fixes addressing CVE-2026-32282, CVE-2026-32289, CVE-2026-33810, CVE-2026-27144, CVE-2026-27143, CVE-2026-32288, CVE-2026-32283, and CVE-2026-27140, and also includes fixes for CVE-2026-32936, CVE-2026-33190, CVE-2026-33489, CVE-2026-32934, and CVE-2026-35579.

View original source

05 / REFERENCES

Further evidence