openSUSE-SU-2026:20703-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20703-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/openSUSE-SU-2026:20703-1
- Upstream
- Related
- Published
- 2026-05-06T17:18:02Z
- Modified
- 2026-05-09T18:29:26Z
- Summary
- Security update for coredns
- Details
-
This update for coredns fixes the following issues:
Changes in coredns:
- Update to version 1.14.3:
- This release introduces Windows service support, along with full TSIG verification across DoH, DoH3, QUIC, and gRPC transports, and improved TSIG propagation and DoH request validation.
- It also adds optional TLS for the metrics endpoint.
- Performance and stability are improved through cache prefetching, QUIC optimizations, and a new max_age option in the forward plugin.
- Additional updates include enhanced SVCB/HTTPS support, improved zone transfer behavior, and various DNSSEC, PROXY protocol, and concurrency fixes.
- The release is built with Go 1.26.2, which includes security fixes addressing CVE-2026-32282, CVE-2026-32289, CVE-2026-33810, CVE-2026-27144, CVE-2026-27143, CVE-2026-32288, CVE-2026-32283, and CVE-2026-27140, and also includes fixes for CVE-2026-32936, CVE-2026-33190, CVE-2026-33489, CVE-2026-32934, and CVE-2026-35579.
- Update to version 1.14.3:
- References
-
- https://www.suse.com/security/cve/CVE-2026-27140
- https://www.suse.com/security/cve/CVE-2026-27143
- https://www.suse.com/security/cve/CVE-2026-27144
- https://www.suse.com/security/cve/CVE-2026-32282
- https://www.suse.com/security/cve/CVE-2026-32283
- https://www.suse.com/security/cve/CVE-2026-32288
- https://www.suse.com/security/cve/CVE-2026-32289
- https://www.suse.com/security/cve/CVE-2026-32934
- https://www.suse.com/security/cve/CVE-2026-32936
- https://www.suse.com/security/cve/CVE-2026-33190
- https://www.suse.com/security/cve/CVE-2026-33489
- https://www.suse.com/security/cve/CVE-2026-33810
- https://www.suse.com/security/cve/CVE-2026-35579