This update for coredns fixes the following issues:
Update to version 1.11.3:
- optimize the performance for high qps (#6767)
- bump deps
- Fix zone parser error handling (#6680)
- Add alternate option to forward plugin (#6681)
- fix: plugin/file: return error when parsing the file fails (#6699)
- [fix:documentation] Clarify autopath README (#6750)
- Fix outdated test (#6747)
- Bump go version from 1.21.8 to 1.21.11 (#6755)
- Generate zplugin.go correctly with third-party plugins (#6692)
- dnstap: uses pointer receiver for small response writer (#6644)
- chore: fix function name in comment (#6608)
- [plugin/forward] Strip local zone from IPV6 nameservers (#6635)
- fixes CVE-2023-30464
- fixes CVE-2023-28452
Update to upstream head (git commit #5a52707):
- bump deps to address security issue CVE-2024-22189
- Return RcodeServerFailure when DNS64 has no next plugin (#6590)
- add plusserver to adopters (#6565)
- Change the log flags to be a variable that can be set prior to calling Run (#6546)
- Enable Prometheus native histograms (#6524)
- forward: respect context (#6483)
- add client labels to k8s plugin metadata (#6475)
- fix broken link in webpage (#6488)
- Repo controlled Go version (#6526)
- removed the mutex locks with atomic bool (#6525)
Update to version 1.11.2:
- rewrite: fix multi request concurrency issue in cname rewrite (#6407)
- plugin/tls: respect the path specified by root plugin (#6138)
- plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
- fix: make the codeowners link relative (#6397)
- plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
- plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
- Use the correct root domain name in the proxy plugin’s TestHealthX tests (#6395)
- Add PITS Global Data Recovery Services as an adopter (#6304)
- Handle UDP responses that overflow with TC bit with test case (#6277)
- plugin/rewrite: add rcode as a rewrite option (#6204)
-
CVE-2024-0874: coredns: CD bit response is cached and served later
-
Update to version 1.11.1:
- Revert “plugin/forward: Continue waiting after receiving malformed responses
- plugin/dnstap: add support for “extra” field in payload
- plugin/cache: fix keepttl parsing
-
Update to version 1.11.0:
- Adds support for accepting DNS connections over QUIC (doq).
- Adds CNAME target rewrites to the rewrite plugin.
- Plus many bug fixes, and some security improvements.
- This release introduces the following backward incompatible changes:
- In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,
since all supported K8s versions now use Endpointslice.
- The bufsize plugin changed its default size limit value to 1232
- Some changes to forward plugin metrics.
-
Update to version 1.10.1:
- Corrected architecture labels in multi-arch image manifest
- A new plugin timeouts that allows configuration of server listener timeout durations
- acl can drop queries as an action
- template supports creating responses with extended DNS errors
- New weighted policy in loadbalance
- Option to serve original record TTLs from cache
-
Update to version 1.10.0:
- core: add log listeners for k8s_event plugin (#5451)
- core: log DoH HTTP server error logs in CoreDNS format (#5457)
- core: warn when domain names are not in RFC1035 preferred syntax (#5414)
- plugin/acl: add support for extended DNS errors (#5532)
- plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
- plugin/cache: add cache disable option (#5540)
- plugin/cache: add metadata for wildcard record responses (#5308)
- plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
- plugin/cache: correct responses to Authenticated Data requests (#5191)
- plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
- plugin/file: add metadata for wildcard record responses (#5308)
- plugin/forward: enable multiple forward declarations (#5127)
- plugin/forward: health_check needs to normalize a specified domain name (#5543)
- plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
- plugin/header: add support for query modification (#5556)
- plugin/health: bypass proxy in self health check (#5401)
- plugin/health: don’t go lameduck when reloading (#5472)
- plugin/k8s_external: add support for PTR requests (#5435)
- plugin/k8s_external: resolve headless services (#5505)
- plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
- plugin/ready: reset list of readiness plugins on startup (#5492)
- plugin/rewrite: add PTR records to supported types (#5565)
- plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
- plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
- plugin/rewrite: support min and max TTL values (#5508)
- plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
- plugin/trace: read trace context info from headers for DOH (#5439)
- plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
- core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
- core: update golang.org/x/crypto to fix CVE-2022-27191
- plugin/acl: adding a check to parse out zone info
- plugin/dnstap: support FQDN TCP endpoint
- plugin/errors: add stacktrace option to log a stacktrace during panic recovery
- plugin/template: return SERVFAIL for zone-match regex-no-match case