# CoreDNS v1.14.2

- Product: CoreDNS (https://whatsnew.fyi/product/coredns)
- Vendor: CNCF
- Date: 2026-03-06
- Version: v1.14.2
- Original notes: https://github.com/coredns/coredns/releases/tag/v1.14.2
- Permalink: https://whatsnew.fyi/product/coredns/releases/v1.14.2

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Add new proxyproto plugin to support Proxy Protocol and preserve client IPs behind load balancers
- **added** — Add metadata for response Type and Class to Log plugin
- **changed** — Update build to Go 1.26.1
- **changed** — Allow disabling jitter in reload plugin with 0s
- **changed** — Use crypto/rand for query name generation in loop plugin
- **fixed** — Fix parsing error when handling TLS+IPv6 address in forward plugin
- **fixed** — Return SOA and NS records when queried for a record CNAMEd to origin in file plugin
- **fixed** — Fix CNAME target rewrite for CNAME chains in rewrite plugin
- **fixed** — Fix panic on empty ListenHosts in kubernetes plugin
- **security** — Reorder rewrite before ACL to prevent ACL bypass (CVE-2026-26017)
- **security** — Use stronger randomness for loop detection (CVE-2026-26018)

This release adds the new proxyproto plugin to support Proxy Protocol and preserve
client IPs behind load balancers. It also includes enhancements such as improved DNS
logging metadata and stronger randomness for loop detection (CVE-2026-26018), along
with several bug fixes including TLS+IPv6 forwarding, improved CNAME handling and
rewriting, allowing jitter disabling, prevention of an ACL bypass (CVE-2026-26017),
and a Kubernetes plugin crash fix. In addition, the release updates the build to
Go 1.26.1, which include security fixes addressing CVE-2026-27137, CVE-2026-27138, CVE-2026-27139,
CVE-2026-25679, and CVE-2026-27142.

##### Brought to You By

Adphi
Henrik Gerdes
hide
Kelly Kane
Shiv Tyagi
vflaux
Ville Vesilehto
yangsenzk
Yong Tang
YOUNEVSKY

##### Noteworthy Changes

* core: Reorder rewrite before acl to prevent bypass (https://github.com/coredns/coredns/pull/7882)
* plugin/file: Return SOA and NS records when queried for a record CNAMEd to origin (https://github.com/coredns/coredns/pull/7808)
* plugin/forward: Fix parsing error when handling TLS+IPv6 address (https://github.com/coredns/coredns/pull/7848)
* plugin/log: Add metadata for response Type and Class to Log (https://github.com/coredns/coredns/pull/7806)
* plugin/loop: Use crypto/rand for query name generation (https://github.com/coredns/coredns/pull/7881)
* plugin/kubernetes: Fix panic on empty ListenHosts (https://github.com/coredns/coredns/pull/7857)
* plugin/proxyproto: Add proxy protocol support (https://github.com/coredns/coredns/pull/7738)
* plugin/reload: Allow disabling jitter with 0s (https://github.com/coredns/coredns/pull/7896)
* plugin/rewrite: Fix cname target rewrite for CNAME chains (https://github.com/coredns/coredns/pull/7853)