{"id":104087,"date":"2022-05-19T03:36:51","date_gmt":"2022-05-19T01:36:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-dns-servera-bind-c-ustraneniem-uyazvimosti-v-realizaczii-dns-over-https"},"modified":"2022-05-19T03:36:51","modified_gmt":"2022-05-19T01:36:51","slug":"obnovlenie-dns-servera-bind-c-ustraneniem-uyazvimosti-v-realizaczii-dns-over-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/es\/blog\/news\/obnovlenie-dns-servera-bind-c-ustraneniem-uyazvimosti-v-realizaczii-dns-over-https","title":{"rendered":"Actualizaci\u00f3n del servidor DNS BIND corrigiendo una vulnerabilidad en la implementaci\u00f3n de DNS-over-HTTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Se han publicado actualizaciones correctivas para las ramas estables del servidor DNS BIND 9.16.28 y 9.18.3, as\u00ed como una nueva versi\u00f3n de la rama experimental 9.19.1. En las versiones 9.18.3 y 9.19.1 se ha corregido una vulnerabilidad (CVE-2022-1183) en la implementaci\u00f3n del mecanismo DNS-over-HTTPS, que se ha soportado desde la rama 9.18. Esta vulnerabilidad provoca el cierre inesperado del proceso named si la conexi\u00f3n TLS con el controlador basado en el protocolo HTTP se interrumpe prematuramente. El problema solo afecta a servidores<\/a>, que gestionan solicitudes DNS over HTTPS (DoH). Los servidores que aceptan solicitudes mediante DNS over TLS (DoT) y no utilizan DoH no est\u00e1n afectados por este problema. <\/p>\n

En la versi\u00f3n 9.18.3 se han a\u00f1adido varias mejoras funcionales. Se ha incorporado el soporte para la segunda versi\u00f3n del cat\u00e1logo de zonas (\"Catalog Zones\"), definido en el quinto borrador de la especificaci\u00f3n IETF. El cat\u00e1logo de zonas ofrece un nuevo m\u00e9todo para mantener servidores DNS secundarios, donde en lugar de definir en el servidor secundario registros individuales para cada zona secundaria, se organiza una transferencia de un conjunto espec\u00edfico de zonas secundarias entre los servidores primarios y secundarios. Es decir, configurando la transferencia del cat\u00e1logo de manera similar a la transferencia de zonas individuales, las zonas que se introduzcan en el servidor primario y que est\u00e9n marcadas como incluidas en el cat\u00e1logo, se crear\u00e1n autom\u00e1ticamente en el servidor secundario sin necesidad de modificar los archivos de configuraci\u00f3n. <\/p>\n

En la nueva versi\u00f3n tambi\u00e9n se ha a\u00f1adido soporte para los c\u00f3digos de error extendidos \"Stale Answer\" y \"Stale NXDOMAIN Answer\", que se emiten cuando una respuesta desactualizada es devuelta desde la cach\u00e9. En named y dig se ha integrado la posibilidad de verificar respuestas externas. de certificados TLS<\/a>, lo que puede utilizarse para organizar autenticaci\u00f3n estricta o conjunta basada en TLS (RFC 9103).
\n
Fuente: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0442\u043e\u043a DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 BIND 9.16.28 \u0438 9.18.3, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u043e\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 9.19.1. \u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 9.18.3 \u0438 9.19.1 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-1183) \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 DNS-over-HTTPS, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0442\u043a\u0438 9.18. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e\u043c\u0443 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 named \u0432 \u0441\u043b\u0443\u0447\u0430\u0435, \u0435\u0441\u043b\u0438 TLS-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043a \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0443 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 HTTP \u0431\u0443\u0434\u0435\u0442 \u0434\u043e\u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043e\u0440\u0432\u0430\u043d\u043e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104087","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Actualizaci\u00f3n del servidor DNS BIND con correcci\u00f3n de la vulnerabilidad en la implementaci\u00f3n de DNS-over-HTTPS | ProHoster","description":"Se han publicado actualizaciones correctivas para las ramas estables del servidor DNS BIND 9.16.28 y 9.18.3, as\u00ed como una nueva versi\u00f3n de la rama experimental 9.19.1.","canonical_url":"https:\/\/prohoster.info\/es\/blog\/news\/obnovlenie-dns-servera-bind-c-ustraneniem-uyazvimosti-v-realizaczii-dns-over-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"es_ES","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 BIND c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 DNS-over-HTTPS | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0442\u043e\u043a DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 BIND 9.16.28 \u0438 9.18.3, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u043e\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 9.19.1.","og:url":"https:\/\/prohoster.info\/es\/blog\/news\/obnovlenie-dns-servera-bind-c-ustraneniem-uyazvimosti-v-realizaczii-dns-over-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-05-19T01:36:51+00:00","article:modified_time":"2022-05-19T01:36:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104087","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 18:13:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-05-19 01:37:51","updated":"2026-02-09 18:13:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/104087","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/comments?post=104087"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/104087\/revisions"}],"predecessor-version":[{"id":159180,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/104087\/revisions\/159180"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media?parent=104087"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/categories?post=104087"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/tags?post=104087"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}