Releases: aks-lts/coredns
v1.13.1-4
This release contains -
CoreDNS upstream version v1.13.1
CoreDNS build using go version 1.25.5, OS family=azurelinux, version=3.0, including CVE fixes for -
github.com/expr-lang/expr - CVE-2025-68156
github.com/quic-go/quic-go - CVE-2025-64702
golang.org/x/crypto - CVE-2025-47914, CVE-2025-58181
stdlib - CVE-2025-61729, CVE-2025-61727
v1.12.1-9
This release contains -
CoreDNS upstream version v1.12.1
CoreDNS build using go version 1.25.5, OS family=azurelinux, version=3.0, including CVE fixes for -
github.com/expr-lang/expr - CVE-2025-68156
github.com/quic-go/quic-go - CVE-2025-64702
golang.org/x/crypto - CVE-2025-47914, CVE-2025-58181
stdlib - CVE-2025-61729, CVE-2025-61727
Updated go.mod:
Upgraded github.com/quic-go/quic-go from v0.54.1 to v0.57.0
Updated server_quic.go:
Changed quic.Connection interface → *quic.Conn type
Updated function signatures:
serveQUICConnection(conn *quic.Conn)
serveQUICStream(stream *quic.Stream, conn *quic.Conn)
closeQUICConn(conn *quic.Conn, code quic.ApplicationErrorCode)
Updated quic.go:
Changed stream quic.Stream → stream *quic.Stream in DoQWriter struct
v1.11.3-17
This release contains -
CoreDNS upstream version v1.11.3
CoreDNS build using go version 1.25.5, OS family=azurelinux, version=3.0, including CVE fixes for -
github.com/golang-jwt/jwt/v4 - CVE-2025-30204, CVE-2024-51744
github.com/quic-go/quic-go - CVE-2025-64702
golang.org/x/crypto - CVE-2025-47914, CVE-2025-58181
golang.org/x/oauth2 - CVE-2025-22868
stdlib - CVE-2025-61729, CVE-2025-61727
Updated go.mod:
Upgraded github.com/quic-go/quic-go from v0.54.1 to v0.57.0
Updated server_quic.go:
Changed quic.Connection interface → *quic.Conn type
Updated function signatures:
serveQUICConnection(conn *quic.Conn)
serveQUICStream(stream *quic.Stream, conn *quic.Conn)
closeQUICConn(conn *quic.Conn, code quic.ApplicationErrorCode)
Updated quic.go:
Changed stream quic.Stream → stream *quic.Stream in DoQWriter struct
v1.9.4-11
This release contains -
CoreDNS upstream version v1.9.4
CoreDNS build using go version 1.25.5, OS family=azurelinux, version=3.0, including CVE fixes for -
golang.org/x/crypto - CVE-2025-47914, CVE-2025-58181
stdlib - CVE-2025-61729, CVE-2025-61727
v1.13.2-2
This release contains -
CoreDNS upstream version v1.13.2
CoreDNS build using go version 1.25.5, OS family=azurelinux, version=3.0, including CVE fixes for -
github.com/expr-lang/expr- CVE-2025-68156
v1.12.1-6
1cea125
SriHarsha001
Sri Harsha
This release contains -
CoreDNS upstream version v1.12.1
CoreDNS build using go version 1.25.1, OS family=azurelinux, version=3.0, including CVE fixes for -
github.com/quic-go/quic-go - CVE-2025-59530
golang.org/x/net - CVE-2025-22872
stdlib - CVE-2025-22874, CVE-2025-47907, CVE-2025-0913, CVE-2025-22871, CVE-2025-4673, CVE-2025-47906
Upgraded CoreDNS from quic-go v0.50.1 to v0.54.1 to fix -
CVEs CVE-2025-59530 (HIGH) in github.com/quic-go/quic-go
CVE-2024-53259 (MEDIUM) in github.com/quic-go/quic-go
Updated go.mod:
Upgraded github.com/quic-go/quic-go from v0.50.1 to v0.54.1
Updated server_quic.go:
Changed quic.Connection interface → *quic.Conn type
Updated function signatures:
serveQUICConnection(conn *quic.Conn)
serveQUICStream(stream *quic.Stream, conn *quic.Conn)
closeQUICConn(conn *quic.Conn, code quic.ApplicationErrorCode)
Updated quic.go:
Changed stream quic.Stream → stream *quic.Stream in DoQWriter struct
v1.11.3-13
f87e442
SriHarsha001
Sri Harsha
This release contains -
CoreDNS upstream version v1.11.3
CoreDNS build using go version 1.25.1, OS family=azurelinux, version=3.0, including CVE fixes for -
github.com/golang-jwt/jwt/v4 - CVE-2025-30204, CVE-2024-51744
github.com/quic-go/quic-go - CVE-2025-59530, CVE-2024-53259
golang.org/x/crypto - CVE-2024-45337, CVE-2025-22869
golang.org/x/net - CVE-2025-22870, CVE-2025-22872
golang.org/x/oauth2 - CVE-2025-22868
stdlib - CVE-2024-34156, CVE-2025-47907, CVE-2024-24791, CVE-2024-34155, CVE-2024-34158, CVE-2024-45336, CVE-2024-45341, CVE-2025-0913, CVE-2025-22866, CVE-2025-22871, CVE-2025-4673, CVE-2025-47906
Upgraded CoreDNS from quic-go v0.50.1 to v0.54.1 to fix -
CVEs CVE-2025-59530 (HIGH) in github.com/quic-go/quic-go
CVE-2024-53259 (MEDIUM) in github.com/quic-go/quic-go
Updated go.mod:
Upgraded github.com/quic-go/quic-go from v0.50.1 to v0.54.1
Updated server_quic.go:
Changed quic.Connection interface → *quic.Conn type
Updated function signatures:
serveQUICConnection(conn *quic.Conn)
serveQUICStream(stream *quic.Stream, conn *quic.Conn)
closeQUICConn(conn *quic.Conn, code quic.ApplicationErrorCode)
Updated quic.go:
Changed stream quic.Stream → stream *quic.Stream in DoQWriter struct
v1.9.4-7
034c606
SriHarsha001
Sri Harsha
This release contains -
CoreDNS upstream version v1.9.4
CoreDNS build using go version 1.25.1, OS family=azurelinux, version=3.0, including CVE fixes for -
github.com/golang-jwt/jwt/v4 - CVE-2025-30204, CVE-2024-51744
github.com/golang/glog - CVE-2024-45339
golang.org/x/crypto - CVE-2024-45337, CVE-2025-22869, CVE-2023-48795
golang.org/x/net - CVE-2022-27664, CVE-2022-41721, CVE-2022-41723, CVE-2023-39325, CVE-2022-41717, CVE-2023-3978, CVE-2023-44487, CVE-2023-45288, CVE-2025-22870, CVE-2025-22872
golang.org/x/oauth2 - CVE-2025-22868
golang.org/x/text - CVE-2022-32149
google.golang.org/grpc - GHSA-m425-mq94-257g
google.golang.org/protobuf - CVE-2024-24786
stdlib - CVE-2023-24538, CVE-2023-24540, CVE-2024-24790, CVE-2022-2879, CVE-2022-2880, CVE-2022-41715, CVE-2022-41716, CVE-2022-41720, CVE-2022-41722, CVE-2022-41723, CVE-2022-41724, CVE-2022-41725, CVE-2023-24534, CVE-2023-24536, CVE-2023-24537, CVE-2023-24539, CVE-2023-29400, CVE-2023-29403, CVE-2023-39325, CVE-2023-45283, CVE-2023-45287, CVE-2023-45288, CVE-2024-34156, CVE-2025-47907, CVE-2022-41717, CVE-2023-24532, CVE-2023-29406, CVE-2023-29409, CVE-2023-39318, CVE-2023-39319, CVE-2023-39326, CVE-2023-45284, CVE-2023-45289, CVE-2023-45290, CVE-2024-24783, CVE-2024-24784, CVE-2024-24785, CVE-2024-24789, CVE-2024-24791, CVE-2024-34155, CVE-2024-34158, CVE-2024-45336, CVE-2024-45341
v1.13.1-1
This release contains -
CoreDNS upstream version v1.13.1
CoreDNS build using go version 1.25.1, OS family=azurelinux, version=3.0.
There are no current CVEs.
v1.12.1-4
This release contains -
CoreDNS upstream version v1.12.1
CoreDNS build using go version 1.25.1, OS family=azurelinux, version=3.0, including CVE fixes for -
stdlib - CVE-2025-47906, CVE-2025-47907
glibc - CVE-2025-4802