{"id":104087,"date":"2022-05-19T03:36:51","date_gmt":"2022-05-19T01:36:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-dns-servera-bind-c-ustraneniem-uyazvimosti-v-realizaczii-dns-over-https"},"modified":"2022-05-19T03:36:51","modified_gmt":"2022-05-19T01:36:51","slug":"obnovlenie-dns-servera-bind-c-ustraneniem-uyazvimosti-v-realizaczii-dns-over-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/obnovlenie-dns-servera-bind-c-ustraneniem-uyazvimosti-v-realizaczii-dns-over-https","title":{"rendered":"BIND DNS-serveri uuendus, mis k\u00f5rvaldab haavatavuse DNS-over-HTTPS teostuses.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

On avaldatud korrektiivsed uuendused DNS-serveri stabiilsetele harudele BIND 9.16.28 ja 9.18.3, samuti uus v\u00e4ljaanne eksperimentaalsest harust 9.19.1. Versioonides 9.18.3 ja 9.19.1 on k\u00f5rvaldatud haavatavus (CVE-2022-1183) DNS-over-HTTPS mehhanismi rakenduses, mida toetas alates harust 9.18. Haavatavus v\u00f5ib p\u00f5hjustada named protsessi kokkuvarisemise, kui TLS-\u00fchendus HTTP-protokolli p\u00f5hjal t\u00f6\u00f6tavale t\u00f6\u00f6tlejale katkeb enne t\u00e4htaega. Probleem m\u00f5jutab ainult serveritesse<\/a>, DNS over HTTPS (DoH) p\u00e4ringute teenindamiseks. Serverid, mis aktsepteerivad p\u00e4ringuid DNS over TLS (DoT) ja ei kasuta DoH-i, ei ole probleemile vastuv\u00f5tlikud. <\/p>\n

V\u00e4ljaandes 9.18.3 on samuti lisatud mitmeid funktsionaalset t\u00e4iustust. Lisatud on teise versiooni tsoonikatalooge (\u201eCatalog Zones\u201d), nagu on m\u00e4\u00e4ratletud IETF viienda eeln\u00f5u spetsifikatsioonis. Tsoonikataloog pakub uut meetodit sekundaarsete DNS-serverite haldamiseks, mille k\u00e4igus ei m\u00e4\u00e4rata sekundaarserveris eraldi kirjeid iga sekundaarses tsoonis, vaid peamise ja sekundaarse serveri vahel korraldatakse kindla komplekti sekundaarsete tsoonide edastamine. See t\u00e4hendab, et seadistades katalooge \u00fclekande, nagu eraldi tsoonide edastamise puhul, luuakse peaseervas m\u00e4\u00e4ratud tsoonid, mis on m\u00e4rgitud kuuluvana katalooge, automaatselt sekundaarserveris, ilma konfiguratsioonifailide muutmiseta. <\/p>\n

Uues versioonis on samuti lisatud toetust laiendatud veakoodidele \u201eStale Answer\u201d ja \u201eStale NXDOMAIN Answer\u201d, mis v\u00e4ljastatakse, kui vananenud vastus naaseb vahem\u00e4lust. Named'is ja dig'is on sisseehitatud v\u00f5imalus v\u00e4liste vastuste valideerimiseks. TLS-sertifikaadid<\/a>, mida saab kasutada rangete v\u00f5i \u00fchilduvate TLS-i (RFC 9103) p\u00f5hjalike autentimise korraldamiseks.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0442\u043e\u043a DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 BIND 9.16.28 \u0438 9.18.3, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u043e\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 9.19.1. \u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 9.18.3 \u0438 9.19.1 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-1183) \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 DNS-over-HTTPS, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0442\u043a\u0438 9.18. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e\u043c\u0443 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 named \u0432 \u0441\u043b\u0443\u0447\u0430\u0435, \u0435\u0441\u043b\u0438 TLS-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043a \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0443 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 HTTP \u0431\u0443\u0434\u0435\u0442 \u0434\u043e\u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043e\u0440\u0432\u0430\u043d\u043e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104087","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47DNS-serveri BIND v\u00e4rskendus, mis k\u00f5rvaldab DNS-over-HTTPS rakenduse haavatavuse | ProHoster","description":"On avaldati korrigeerivad uuendused DNS-serveri BIND stabiilsetele harudele versioonides 9.16.28 ja 9.18.3, samuti uus katseharu versioon 9.19.1.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/obnovlenie-dns-servera-bind-c-ustraneniem-uyazvimosti-v-realizaczii-dns-over-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 BIND c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 DNS-over-HTTPS | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0442\u043e\u043a DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 BIND 9.16.28 \u0438 9.18.3, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u043e\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 9.19.1.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/obnovlenie-dns-servera-bind-c-ustraneniem-uyazvimosti-v-realizaczii-dns-over-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-05-19T01:36:51+00:00","article:modified_time":"2022-05-19T01:36:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104087","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 18:13:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-05-19 01:37:51","updated":"2026-02-09 18:13:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/104087","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=104087"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/104087\/revisions"}],"predecessor-version":[{"id":159180,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/104087\/revisions\/159180"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=104087"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=104087"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=104087"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}