Skip to content

Commit 023b191

Browse files
vooonvooon
committed
coredns: update to 1.14.2
Security fixes for CVE-2026-26017, CVE-2026-26018. Release notes: https://github.com/coredns/coredns/releases/tag/v1.14.2 Package changes: - Add optional proxyproto plugin config - Fix configure-plugin macro to preserve upstream plugin ordering - Reorganize Config.in with section headers and help texts Signed-off-by: Vladimir Ermakov <vooon341@gmail.com>
1 parent 6b3c95c commit 023b191

File tree

2 files changed

+87
-33
lines changed

2 files changed

+87
-33
lines changed

‎net/coredns/Config.in‎

Lines changed: 81 additions & 27 deletions
Original file line numberDiff line numberDiff line change
@@ -1,84 +1,138 @@
11
if PACKAGE_coredns
22

3-
config COREDNS_PLUGIN_GEOIP
4-
bool "GeoIP plugin"
5-
default n
3+
comment "Transport & Security"
64

75
config COREDNS_PLUGIN_TLS
86
bool "TLS plugin"
97
default y
8+
help
9+
Enable TLS (DNS-over-TLS) listener support.
1010

1111
config COREDNS_PLUGIN_QUIC
12-
bool "QUIC plugin"
12+
bool "QUIC plugin (DNS-over-QUIC)"
1313
default n
14+
help
15+
Enable DNS-over-QUIC (DoQ) listener support. Requires TLS certificates.
1416

15-
config COREDNS_PLUGIN_ROUTE53
16-
bool "Route53 plugin"
17+
config COREDNS_PLUGIN_GRPC
18+
bool "gRPC plugin"
1719
default n
20+
help
21+
Forward or receive DNS messages over gRPC.
1822

19-
config COREDNS_PLUGIN_AZURE
20-
bool "Azure plugin"
23+
config COREDNS_PLUGIN_PROXYPROTO
24+
bool "Proxy Protocol plugin"
2125
default n
26+
help
27+
Add PROXY protocol (v1/v2) support to preserve original client IPs
28+
when CoreDNS sits behind a load balancer or reverse proxy.
2229

23-
config COREDNS_PLUGIN_CLOUDDNS
24-
bool "CloudDNS plugin"
30+
comment "Service Discovery Backends"
31+
32+
config COREDNS_PLUGIN_KUBERNETES
33+
bool "Kubernetes plugin"
2534
default n
35+
help
36+
Serve DNS records for Kubernetes services and pods.
37+
Only useful when running inside a Kubernetes cluster.
2638

2739
config COREDNS_PLUGIN_K8S_EXTERNAL
2840
bool "k8s_external plugin"
2941
default n
30-
31-
config COREDNS_PLUGIN_KUBERNETES
32-
bool "Kubernetes plugin"
33-
default n
42+
help
43+
Serve DNS records for external-facing Kubernetes services
44+
(e.g. LoadBalancer / ExternalName).
3445

3546
config COREDNS_PLUGIN_ETCD
3647
bool "Etcd plugin"
3748
default n
49+
help
50+
Serve DNS records from an etcd v3 datastore (SkyDNS-compatible).
3851

39-
config COREDNS_PLUGIN_GRPC
40-
bool "gRPC plugin"
52+
config COREDNS_PLUGIN_NOMAD
53+
bool "Nomad plugin"
54+
default n
55+
help
56+
Serve DNS records from HashiCorp Nomad service registrations.
57+
58+
comment "Cloud DNS Backends"
59+
60+
config COREDNS_PLUGIN_ROUTE53
61+
bool "Route53 plugin (AWS)"
4162
default n
63+
help
64+
Serve DNS records from AWS Route 53 hosted zones.
65+
Adds significant binary size due to AWS SDK.
4266

43-
config COREDNS_PLUGIN_ON
44-
bool "On event plugin"
67+
config COREDNS_PLUGIN_AZURE
68+
bool "Azure DNS plugin"
4569
default n
70+
help
71+
Serve DNS records from Azure DNS hosted zones.
72+
Adds significant binary size due to Azure SDK.
4673

47-
config COREDNS_PLUGIN_NOMAD
48-
bool "Nomad plugin"
74+
config COREDNS_PLUGIN_CLOUDDNS
75+
bool "Cloud DNS plugin (GCP)"
4976
default n
77+
help
78+
Serve DNS records from Google Cloud DNS managed zones.
79+
Adds significant binary size due to GCP SDK.
80+
81+
comment "Extra Built-in Plugins"
82+
83+
config COREDNS_PLUGIN_GEOIP
84+
bool "GeoIP plugin"
85+
default n
86+
help
87+
Add GeoIP-based metadata to requests (requires MaxMind database).
88+
89+
config COREDNS_PLUGIN_ON
90+
bool "On-event plugin"
91+
default n
92+
help
93+
Execute a command on server start/shutdown events.
94+
95+
comment "Third-party Plugins"
5096

5197
config COREDNS_PLUGIN_WGSD
5298
bool "WireGuard Service Discovery plugin"
5399
default y if PACKAGE_wgsd-coredns
54100
select COREDNS_REQUIRE_GO_GET
55101
help
56-
wgsd is a CoreDNS plugin that serves WireGuard peer information via DNS-SD (RFC6763) semantics.
57-
This enables use cases such as:
58-
59-
- Building a mesh of WireGuard peers from a central registry
60-
- Dynamic discovery of WireGuard Endpoint addressing (both IP address and port number)
61-
- NAT-to-NAT WireGuard connectivity where UDP hole punching is supported.
102+
wgsd serves WireGuard peer information via DNS-SD (RFC 6763)
103+
semantics. Use cases include:
104+
- Building a mesh of WireGuard peers from a central registry
105+
- Dynamic discovery of WireGuard endpoint addressing
106+
- NAT-to-NAT connectivity where UDP hole punching is supported
62107

63108
config COREDNS_PLUGIN_NETBOX
64109
bool "Netbox plugin"
65110
default n
66111
select COREDNS_REQUIRE_GO_GET
112+
help
113+
Serve DNS records from a NetBox IPAM/DCIM instance.
67114

68115
config COREDNS_PLUGIN_FANOUT
69116
bool "Fanout plugin"
70117
default n
71118
select COREDNS_REQUIRE_GO_GET
119+
help
120+
Forward DNS queries to multiple upstreams simultaneously and return
121+
the first successful response (race / fan-out strategy).
72122

73123
config COREDNS_PLUGIN_FINALIZE
74124
bool "Finalize plugin"
75125
default n
76126
select COREDNS_REQUIRE_GO_GET
127+
help
128+
Ensure all CNAME chains in responses are fully resolved before
129+
sending the answer to the client.
77130

78131
config COREDNS_REQUIRE_GO_GET
79132
bool
80133
default n
81134
help
82-
Custom plugins require `go get ./...` to pull dependencies.
135+
Custom / third-party plugins require 'go get ./...' during build
136+
to pull their module dependencies.
83137

84138
endif

‎net/coredns/Makefile‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,12 @@
11
include $(TOPDIR)/rules.mk
22

33
PKG_NAME:=coredns
4-
PKG_VERSION:=1.14.1
4+
PKG_VERSION:=1.14.2
55
PKG_RELEASE:=1
66

77
PKG_SOURCE_PROTO:=git
88
PKG_SOURCE_URL:=https://github.com/coredns/coredns.git
9-
PKG_MIRROR_HASH:=be51352801f5455ac0a7f3c97adaa86587bb2343f50ee2779f48121c96e2f4f9
9+
PKG_MIRROR_HASH:=6d82a06f7fe8b0f54a919058e8cd2839a113b81dd9d0217e280d2bea665668ce
1010
PKG_SOURCE_VERSION:=v$(PKG_VERSION)
1111

1212
PKG_LICENSE:=Apache-2.0
@@ -53,10 +53,9 @@ define Package/coredns/conffiles
5353
endef
5454

5555
define configure-plugin
56-
$(SED) '/^$(2):/d' "$(PKG_BUILD_DIR)/plugin.cfg"
57-
ifeq ($(1),y)
58-
echo "$(2):$(3)" >> "$(PKG_BUILD_DIR)/plugin.cfg"
59-
endif
56+
$(if $(filter y,$(1)),\
57+
grep -q '^$(2):' "$(PKG_BUILD_DIR)/plugin.cfg" || echo "$(2):$(3)" >> "$(PKG_BUILD_DIR)/plugin.cfg",\
58+
$(SED) '/^$(2):/d' "$(PKG_BUILD_DIR)/plugin.cfg")
6059
endef
6160

6261
define Build/Configure
@@ -73,6 +72,7 @@ define Build/Configure
7372
$(call configure-plugin,$(CONFIG_COREDNS_PLUGIN_KUBERNETES),kubernetes,kubernetes)
7473
$(call configure-plugin,$(CONFIG_COREDNS_PLUGIN_ETCD),etcd,etcd)
7574
$(call configure-plugin,$(CONFIG_COREDNS_PLUGIN_GRPC),grpc,grpc)
75+
$(call configure-plugin,$(CONFIG_COREDNS_PLUGIN_PROXYPROTO),proxyproto,proxyproto)
7676
$(call configure-plugin,$(CONFIG_COREDNS_PLUGIN_ON),on,github.com/coredns/caddy/onevent)
7777
$(call configure-plugin,$(CONFIG_COREDNS_PLUGIN_NOMAD),nomad,nomad)
7878
$(call configure-plugin,$(CONFIG_COREDNS_PLUGIN_WGSD),wgsd,github.com/jwhited/wgsd)

0 commit comments

Comments
 (0)