Security update for coredns (important)

openSUSE Security Update: Security update for coredns Announcement ID: openSUSE-SU-2026:0324-1 Rating: important References: 1276712 Cross-References: CVE-2026-27140 CVE-2026-27143 CVE-2026-27144 CVE-2026-32282 CVE-2026-32283 CVE-2026-32288 CVE-2026-32289 CVE-2026-32934 CVE-2026-32936...

CVE-2026-84304 affecting package coredns for versions less than 1.11.4-21

CVE-2026-84304 affecting package coredns for versions less than 1.11.4-21. An upgraded version of the package is available that resolves this issue...

CVE-2026-84445 affecting package coredns for versions less than 1.11.4-21

CVE-2026-84445 affecting package coredns for versions less than 1.11.4-21. An upgraded version of the package is available that resolves this issue...

CLEANSTART-2026-XC00701 Security fix for CVE-2025-11411 applied in: coredns 1.14.0-r0

Security vulnerability affects the coredns package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NH76134 Security fix for CVE-2025-5994 applied in: coredns 1.14.0-r0

Security vulnerability affects the coredns package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-LE40219 Security fix for CVE-2026-35579 applied in: coredns 1.14.2-r1, kubernetes-dns-node-cache 1.23.1-r0, kubernetes-dns-node-cache 1.24.1-r1, kubernetes-dns-node-cache 1.25.0-r8, kubernetes-dns-node-cache 1.26.0-r1, kubernetes-dns-node-cache-fips 1.26.0-r1

CVE-2026-35579 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UC10506 Security fix for CVE-2026-32934 applied in: coredns 1.14.2-r1, kubernetes-dns-node-cache 1.23.1-r0, kubernetes-dns-node-cache 1.24.1-r1, kubernetes-dns-node-cache 1.25.0-r8, kubernetes-dns-node-cache 1.26.0-r1, kubernetes-dns-node-cache-fips 1.26.0-r1

CVE-2026-32934 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SO59114 Security fix for CVE-2026-32936 applied in: coredns 1.14.2-r1, kubernetes-dns-node-cache 1.23.1-r0, kubernetes-dns-node-cache 1.24.1-r1, kubernetes-dns-node-cache 1.25.0-r8, kubernetes-dns-node-cache 1.26.0-r1, kubernetes-dns-node-cache-fips 1.26.0-r1

CVE-2026-32936 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IX62843 Security fix for CVE-2026-33190 applied in: coredns 1.14.2-r1, kubernetes-dns-node-cache 1.23.1-r0, kubernetes-dns-node-cache 1.24.1-r1, kubernetes-dns-node-cache 1.25.0-r8, kubernetes-dns-node-cache 1.26.0-r1, kubernetes-dns-node-cache-fips 1.26.0-r1

CVE-2026-33190 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GQ96342 Security fix for CVE-2026-33489 applied in: coredns 1.14.2-r1, kubernetes-dns-node-cache 1.23.1-r0, kubernetes-dns-node-cache 1.24.1-r1, kubernetes-dns-node-cache 1.25.0-r8, kubernetes-dns-node-cache 1.26.0-r1, kubernetes-dns-node-cache-fips 1.26.0-r1

CVE-2026-33489 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

The vulnerability of the dns.Msg.Unpack() function in the plugin/pkg/doh/doh.go, core/dnsserver/server_quic.go, and core/dnsserver/server_grpc.go files of the coredns server allows a attacker to cause a service failure.

The vulnerability of the dns.Msg.Unpack function in the plugin/pkg/doh/doh.go, core/dnsserver/serverquic.go, and core/dnsserver/servergrpc.go files of the coredns server is related to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service...

The vulnerability of the dns.Msg.Unpack() function in the plugin/pkg/doh/doh.go, core/dnsserver/server_quic.go, and core/dnsserver/server_grpc.go files of the coredns server allows a attacker to compromise the integrity of the protected information.

The vulnerability of the dns.Msg.Unpack function in the plugin/pkg/doh/doh.go, core/dnsserver/serverquic.go, and core/dnsserver/servergrpc.go files of the coredns server is related to the ability to bypass access control mechanisms. Exploiting this vulnerability allows a malicious actor to...

CVE-2026-82399

creationtimestamp| type| source ---|---|--- 2026-09-17 22:35:17+00:00| published-proof-of-concept| https://github.com/coredns/coredns/security/advisories/GHSA-mrg3-qvqr-jw29 2026-09-18 09:31:38+00:00| seen| https://gist.github.com/alon710/b4f0369e3101a49089dd01d5083aac3c...

CVE-2026-86003

creationtimestamp| type| source ---|---|--- 2026-09-17 22:35:09+00:00| published-proof-of-concept| https://github.com/coredns/coredns/security/advisories/GHSA-9gm5-9rfh-m6vx 2026-09-18 04:31:38+00:00| seen| https://gist.github.com/alon710/e7a608459f9cd16dd9b84291002561e5...

GHSA-9GM5-9RFH-M6VX CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP

Summary CoreDNS accepted RFC 2136 UPDATE messages over DoH, DoH3, DoQ, and DNS-over-gRPC, then allowed the proxy/forward plugin to send them unchanged to an upstream DNS server. UDP, TCP, and DoT rejected the same opcode before plugin dispatch. If an update-capable upstream trusts CoreDNS's sourc...

EUVD-2026-80989

CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP...

CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP

Summary CoreDNS accepted RFC 2136 UPDATE messages over DoH, DoH3, DoQ, and DNS-over-gRPC, then allowed the proxy/forward plugin to send them unchanged to an upstream DNS server. UDP, TCP, and DoT rejected the same opcode before plugin dispatch. If an update-capable upstream trusts CoreDNS's sourc...

EUVD-2026-80987

CoreDNS: Unauthenticated memory exhaustion in custom transports...

CoreDNS: Unauthenticated memory exhaustion in custom transports

Summary CoreDNS parses attacker-controlled DNS section counts before validating them on DNS-over-HTTPS DoH and DoH3, DNS-over-QUIC DoQ, and DNS-over-gRPC listeners. An unauthenticated client can use DNS name compression to make one 65,533-byte request allocate more than 10 MiB while it is unpacke...

GHSA-MRG3-QVQR-JW29 CoreDNS: Unauthenticated memory exhaustion in custom transports

Summary CoreDNS parses attacker-controlled DNS section counts before validating them on DNS-over-HTTPS DoH and DoH3, DNS-over-QUIC DoQ, and DNS-over-gRPC listeners. An unauthenticated client can use DNS name compression to make one 65,533-byte request allocate more than 10 MiB while it is unpacke...