发布日期: 2026-01-08
版本号: v1.14.0

本次发布主要聚焦于安全加固和运行可靠性提升。核心更新引入了正则表达式长度限制以降低资源耗尽风险。插件更新改进了错误合并功能、减少了误导性SOA警告、增加了Kubernetes API速率限制、增强了指标中的插件链跟踪,并修复了Azure和Sign插件中的问题。此外还包含其他安全修复,具体信息请参阅安全公告。

更新内容 (中文)

本次发布专注于安全加固与操作可靠性。核心更新引入正则表达式长度限制以降低资源耗尽风险。插件更新改进了错误整合机制(show_first)、减少了误导性SOA警告、添加了Kubernetes API速率限制、增强了带插件链追踪的指标监控,并修复了azure和sign插件中的问题。本次发布还包含额外安全修复;详见安全公告。

贡献者

cangming
pasteley
Raisa Kabir
Ross Golder
rusttech
Syed Azeez
Ville Vesilehto
Yong Tang

值得关注的变更

  • core: 修复gosec G115整数溢出警告(https://github.com/coredns/coredns/pull/7799)
  • core: 添加正则表达式长度限制(https://github.com/coredns/coredns/pull/7802)
  • plugin/azure: 修复切片初始化长度问题(https://github.com/coredns/coredns/pull/6901)
  • plugin/errors: 为整合指令添加可选的show_first标志(https://github.com/coredns/coredns/pull/7703)
  • plugin/file: 修复误导性SOA解析器警告(https://github.com/coredns/coredns/pull/7774)
  • plugin/kubernetes: 添加API服务器速率限制(https://github.com/coredns/coredns/pull/7771)
  • plugin/metrics: 实现插件链追踪功能(https://github.com/coredns/coredns/pull/7791)
  • plugin/sign: 在缺失SOA前报告解析器错误(https://github.com/coredns/coredns/pull/7775)

更新内容 (原始)

This release focuses on security hardening and operational reliability. Core updates introduce a regex length limit to reduce resource-exhaustion risk. Plugin updates improve error consolidation (show_first), reduce misleading SOA warnings, add Kubernetes API rate limiting, enhance metrics with plugin chain tracking, and fix issues in azure and sign. This release also includes additional security fixes; see the security advisory for details.

Brought to You By

cangming pasteley Raisa Kabir Ross Golder rusttech Syed Azeez Ville Vesilehto Yong Tang

Noteworthy Changes

下载链接