This is a release with a focus on security (CVE-2022-27191 and CVE-2022-28948) fixes. Additionally, several feature enhancements and bug fixes have been added.

Brought to You By

Chris O’Haver, lobshunter, Naveen, Radim Hatlapatka, RetoHaslerMGB, Tintin, Yong Tang

Noteworthy Changes

• core: update gopkg.in/yaml.v3 to fix CVE-2022-28948 (https://github.com/coredns/coredns/pull/5408)
• core: update golang.org/x/crypto to fix CVE-2022-27191 (https://github.com/coredns/coredns/pull/5407)
• plugin/acl: adding a check to parse out zone info (https://github.com/coredns/coredns/pull/5387)
• plugin/dnstap: support FQDN TCP endpoint (https://github.com/coredns/coredns/pull/5377)
• plugin/errors: add stacktrace option to log a stacktrace during panic recovery (https://github.com/coredns/coredns/pull/5392)
• plugin/template: return SERVFAIL for zone-match regex-no-match case (https://github.com/coredns/coredns/pull/5180)