{"id":104087,"date":"2022-05-19T03:36:51","date_gmt":"2022-05-19T01:36:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-dns-servera-bind-c-ustraneniem-uyazvimosti-v-realizaczii-dns-over-https"},"modified":"2022-05-19T03:36:51","modified_gmt":"2022-05-19T01:36:51","slug":"obnovlenie-dns-servera-bind-c-ustraneniem-uyazvimosti-v-realizaczii-dns-over-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/obnovlenie-dns-servera-bind-c-ustraneniem-uyazvimosti-v-realizaczii-dns-over-https","title":{"rendered":"Aktualizace DNS serveru BIND s odstran\u011bn\u00edm zranitelnosti v implementaci DNS-over-HTTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Byly zve\u0159ejn\u011bny opravy stabiln\u00edch v\u011btv\u00ed DNS serveru BIND 9.16.28 a 9.18.3, stejn\u011b jako nov\u00e1 verze experiment\u00e1ln\u00ed v\u011btve 9.19.1. Ve verz\u00edch 9.18.3 a 9.19.1 byla odstran\u011bna zranitelnost (CVE-2022-1183) v implementaci mechanismu DNS-over-HTTPS, podporovan\u00e9ho od verze 9.18. Zranitelnost m\u016f\u017ee zp\u016fsobit hav\u00e1rii procesu named, pokud je TLS spojen\u00ed k handleru na z\u00e1klad\u011b protokolu HTTP p\u0159ed\u010dasn\u011b p\u0159eru\u0161eno. Probl\u00e9m se t\u00fdk\u00e1 pouze servery<\/a>, kter\u00e9 zpracov\u00e1vaj\u00ed po\u017eadavky DNS over HTTPS (DoH). Servery, kter\u00e9 p\u0159ij\u00edmaj\u00ed po\u017eadavky pomoc\u00ed DNS over TLS (DoT) a nepou\u017e\u00edvaj\u00ed DoH, ohro\u017eeny nejsou. <\/p>\n

Ve verzi 9.18.3 byla tak\u00e9 p\u0159id\u00e1na \u0159ada funk\u010dn\u00edch vylep\u0161en\u00ed. Byla p\u0159id\u00e1na podpora druh\u00e9 verze katalogu z\u00f3n («Catalog Zones»), jak je definov\u00e1no v p\u00e1t\u00e9m n\u00e1vrhu specifikace IETF. Katalog z\u00f3n nab\u00edz\u00ed nov\u00fd zp\u016fsob spr\u00e1vy sekund\u00e1rn\u00edch DNS server\u016f, kde m\u00edsto definov\u00e1n\u00ed jednotliv\u00fdch z\u00e1znam\u016f pro ka\u017edou sekund\u00e1rn\u00ed z\u00f3nu na sekund\u00e1rn\u00edm serveru, se organizuje p\u0159enos ur\u010dit\u00e9ho souboru sekund\u00e1rn\u00edch z\u00f3n mezi prim\u00e1rn\u00edm a sekund\u00e1rn\u00edm serverem. To znamen\u00e1, \u017ee p\u0159i nastaven\u00ed p\u0159enosu katalogu obdobn\u011b jako p\u0159enos jednotliv\u00fdch z\u00f3n, z\u00f3ny, kter\u00e9 jsou na prim\u00e1rn\u00edm serveru ozna\u010deny jako pat\u0159\u00edc\u00ed do katalogu, budou automaticky vytv\u00e1\u0159eny na sekund\u00e1rn\u00edm serveru bez pot\u0159eby \u00fapravy konfigura\u010dn\u00edch soubor\u016f. <\/p>\n

V nov\u00e9 verzi byla tak\u00e9 p\u0159id\u00e1na podpora roz\u0161\u00ed\u0159en\u00fdch k\u00f3d\u016f chyb «Stale Answer» a «Stale NXDOMAIN Answer», kter\u00e9 jsou vyd\u00e1v\u00e1ny, kdy\u017e je zastaral\u00e1 odpov\u011b\u010f vr\u00e1cena z cache. Do program\u016f named a dig byla integrov\u00e1na funkce pro ov\u011b\u0159ov\u00e1n\u00ed extern\u00edch TLS certifik\u00e1t\u016f<\/a>, co\u017e lze vyu\u017e\u00edt k zaji\u0161t\u011bn\u00ed p\u0159\u00edsn\u00e9 nebo vz\u00e1jemn\u00e9 autentizace na z\u00e1klad\u011b TLS (RFC 9103).
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0442\u043e\u043a DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 BIND 9.16.28 \u0438 9.18.3, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u043e\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 9.19.1. \u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 9.18.3 \u0438 9.19.1 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-1183) \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 DNS-over-HTTPS, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0442\u043a\u0438 9.18. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e\u043c\u0443 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 named \u0432 \u0441\u043b\u0443\u0447\u0430\u0435, \u0435\u0441\u043b\u0438 TLS-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043a \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0443 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 HTTP \u0431\u0443\u0434\u0435\u0442 \u0434\u043e\u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043e\u0440\u0432\u0430\u043d\u043e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104087","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Aktualizace DNS serveru BIND s odstran\u011bn\u00edm zranitelnosti v implementaci DNS-over-HTTPS | ProHoster","description":"Byly zve\u0159ejn\u011bny opravy stabiln\u00edch v\u011btv\u00ed DNS serveru BIND 9.16.28 a 9.18.3, stejn\u011b jako nov\u00e1 verze experiment\u00e1ln\u00ed v\u011btve 9.19.1.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/obnovlenie-dns-servera-bind-c-ustraneniem-uyazvimosti-v-realizaczii-dns-over-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 BIND c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 DNS-over-HTTPS | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0442\u043e\u043a DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 BIND 9.16.28 \u0438 9.18.3, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u043e\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 9.19.1.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/obnovlenie-dns-servera-bind-c-ustraneniem-uyazvimosti-v-realizaczii-dns-over-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-05-19T01:36:51+00:00","article:modified_time":"2022-05-19T01:36:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104087","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 18:13:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-05-19 01:37:51","updated":"2026-02-09 18:13:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/104087","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=104087"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/104087\/revisions"}],"predecessor-version":[{"id":159180,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/104087\/revisions\/159180"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=104087"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=104087"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=104087"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}