gpp_maybe Security update for coredns

openSUSE-2026-80

This update for coredns fixes the following issues: Update to version 1.14.2: - CVE-2026-26017: Fixed DNS access control bypass due to default execution order of plugins and TOCTOU flaw (bsc#1259320). - CVE-2026-26018: Fixed denial of service in the loop detection plugin due to predictable PRNG combined with fatal error handler (bsc#1259319). - CVE-2025-68156: Fixed uncontrolled recursion in expression evaluation can cause a denial of service (bsc#1255345).

• Release Date
  Mar 11 2026
• References
  Bugzilla: 1259319, 1259320, 1255345
  CVEs: CVE-2025-68156, CVE-2026-26018, CVE-2026-26017
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Package Hub 15.7 x86_64

• Packages
  coredns
  DNS server written in Go

  1.14.2-bp157.2.13.1 lock rpm

  coredns-extras
  Extra components for the coredns package

  1.14.2-bp157.2.13.1 lock rpm

SUSE Package Hub 15.7 ppc64le

• Packages
  coredns
  DNS server written in Go

  1.14.2-bp157.2.13.1 lock rpm

  coredns-extras
  Extra components for the coredns package

  1.14.2-bp157.2.13.1 lock rpm

SUSE Package Hub 15.7 s390x

• Packages
  coredns-extras
  Extra components for the coredns package

  1.14.2-bp157.2.13.1 lock rpm

SUSE Package Hub 15.7 aarch64

• Packages
  coredns
  DNS server written in Go

  1.14.2-bp157.2.13.1 lock rpm

  coredns-extras
  Extra components for the coredns package

  1.14.2-bp157.2.13.1 lock rpm