coredns v1.14.0 版本更新介绍
发布日期: 2026-01-08
版本号: v1.14.0
本次发布主要聚焦于安全加固和运行可靠性提升。核心更新引入了正则表达式长度限制以降低资源耗尽风险。插件更新改进了错误合并功能、减少了误导性SOA警告、增加了Kubernetes API速率限制、增强了指标中的插件链跟踪,并修复了Azure和Sign插件中的问题。此外还包含其他安全修复,具体信息请参阅安全公告。
更新内容 (中文)
本次发布专注于安全加固与操作可靠性。核心更新引入正则表达式长度限制以降低资源耗尽风险。插件更新改进了错误整合机制(show_first)、减少了误导性SOA警告、添加了Kubernetes API速率限制、增强了带插件链追踪的指标监控,并修复了azure和sign插件中的问题。本次发布还包含额外安全修复;详见安全公告。
贡献者
cangming
pasteley
Raisa Kabir
Ross Golder
rusttech
Syed Azeez
Ville Vesilehto
Yong Tang
值得关注的变更
- core: 修复gosec G115整数溢出警告(https://github.com/coredns/coredns/pull/7799)
- core: 添加正则表达式长度限制(https://github.com/coredns/coredns/pull/7802)
- plugin/azure: 修复切片初始化长度问题(https://github.com/coredns/coredns/pull/6901)
- plugin/errors: 为整合指令添加可选的
show_first标志(https://github.com/coredns/coredns/pull/7703) - plugin/file: 修复误导性SOA解析器警告(https://github.com/coredns/coredns/pull/7774)
- plugin/kubernetes: 添加API服务器速率限制(https://github.com/coredns/coredns/pull/7771)
- plugin/metrics: 实现插件链追踪功能(https://github.com/coredns/coredns/pull/7791)
- plugin/sign: 在缺失SOA前报告解析器错误(https://github.com/coredns/coredns/pull/7775)
更新内容 (原始)
This release focuses on security hardening and operational reliability. Core updates
introduce a regex length limit to reduce resource-exhaustion risk. Plugin updates
improve error consolidation (show_first), reduce misleading SOA warnings, add
Kubernetes API rate limiting, enhance metrics with plugin chain tracking, and fix
issues in azure and sign. This release also includes additional security fixes;
see the security advisory for details.
Brought to You By
cangming pasteley Raisa Kabir Ross Golder rusttech Syed Azeez Ville Vesilehto Yong Tang
Noteworthy Changes
- core: Fix gosec G115 integer overflow warnings (https://github.com/coredns/coredns/pull/7799)
- core: Add regex length limit (https://github.com/coredns/coredns/pull/7802)
- plugin/azure: Fix slice init length (https://github.com/coredns/coredns/pull/6901)
- plugin/errors: Add optional
show_firstflag to consolidate directive (https://github.com/coredns/coredns/pull/7703) - plugin/file: Fix for misleading SOA parser warnings (https://github.com/coredns/coredns/pull/7774)
- plugin/kubernetes: Rate limits to api server (https://github.com/coredns/coredns/pull/7771)
- plugin/metrics: Implement plugin chain tracking (https://github.com/coredns/coredns/pull/7791)
- plugin/sign: Report parser err before missing SOA (https://github.com/coredns/coredns/pull/7775)
下载链接
- coredns_1.14.0_darwin_amd64.tgz
- coredns_1.14.0_darwin_amd64.tgz.sha256
- coredns_1.14.0_darwin_arm64.tgz
- coredns_1.14.0_darwin_arm64.tgz.sha256
- coredns_1.14.0_linux_amd64.tgz
- coredns_1.14.0_linux_amd64.tgz.sha256
- coredns_1.14.0_linux_arm.tgz
- coredns_1.14.0_linux_arm.tgz.sha256
- coredns_1.14.0_linux_arm64.tgz
- coredns_1.14.0_linux_arm64.tgz.sha256
- coredns_1.14.0_linux_mips.tgz
- coredns_1.14.0_linux_mips.tgz.sha256
- coredns_1.14.0_linux_mips64le.tgz
- coredns_1.14.0_linux_mips64le.tgz.sha256
- coredns_1.14.0_linux_ppc64le.tgz
- coredns_1.14.0_linux_ppc64le.tgz.sha256
- coredns_1.14.0_linux_riscv64.tgz
- coredns_1.14.0_linux_riscv64.tgz.sha256
- coredns_1.14.0_linux_s390x.tgz
- coredns_1.14.0_linux_s390x.tgz.sha256
- coredns_1.14.0_windows_amd64.tgz
- coredns_1.14.0_windows_amd64.tgz.sha256