v1.14.2
TimmyOVO/deepseek-ocr.rsv1.14.2Mar 6, 2026by github-actions[bot]
AI Summary
This release adds a new proxyproto plugin to support Proxy Protocol and preserve client IPs behind load balancers. It includes enhancements to DNS logging metadata and loop detection security, along with fixes for TLS+IPv6 forwarding, CNAME handling, and a Kubernetes plugin crash. The build is updated to Go 1.26.1.
Key Highlights
- New proxyproto plugin for Proxy Protocol support
- Enhanced DNS logging metadata (Type and Class)
- Security fixes for loop detection (CVE-2026-26018) and ACL bypass (CVE-2026-26017)
- Bug fixes for TLS+IPv6 forwarding, CNAME handling, and Kubernetes plugin
- Build updated to Go 1.26.1
New Features
- Proxy Protocol support via proxyproto plugin
- DNS logging metadata for response Type and Class
- Jitter disabling option for the reload plugin
Full Release Notes
This release adds the new proxyproto plugin to support Proxy Protocol and preserve client IPs behind load balancers. It also includes enhancements such as improved DNS logging metadata and stronger randomness for loop detection (CVE-2026-26018), along with several bug fixes including TLS+IPv6 forwarding, improved CNAME handling and rewriting, allowing jitter disabling, prevention of an ACL bypass (CVE-2026-26017), and a Kubernetes plugin crash fix. In addition, the release updates the build to Go 1.26.1, which include security fixes addressing CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-25679, and CVE-2026-27142. ## Brought to You By Adphi Henrik Gerdes hide Kelly Kane Shiv Tyagi vflaux Ville Vesilehto yangsenzk Yong Tang YOUNEVSKY ## Noteworthy Changes * core: Reorder rewrite before acl to prevent bypass (https://github.com/coredns/coredns/pull/7882) * plugin/file: Return SOA and NS records when queried for a record CNAMEd to origin (https://github.com/coredns/coredns/pull/7808) * plugin/forward: Fix parsing error when handling TLS+IPv6 address (https://github.com/coredns/coredns/pull/7848) * plugin/log: Add metadata for response Type and Class to Log (https://github.com/coredns/coredns/pull/7806) * plugin/loop: Use crypto/rand for query name generation (https://github.com/coredns/coredns/pull/7881) * plugin/kubernetes: Fix panic on empty ListenHosts (https://github.com/coredns/coredns/pull/7857) * plugin/proxyproto: Add proxy protocol support (https://github.com/coredns/coredns/pull/7738) * plugin/reload: Allow disabling jitter with 0s (https://github.com/coredns/coredns/pull/7896) * plugin/rewrite: Fix cname target rewrite for CNAME chains (https://github.com/coredns/coredns/pull/7853)