{"id":104087,"date":"2022-05-19T03:36:51","date_gmt":"2022-05-19T01:36:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-dns-servera-bind-c-ustraneniem-uyazvimosti-v-realizaczii-dns-over-https"},"modified":"2022-05-19T03:36:51","modified_gmt":"2022-05-19T01:36:51","slug":"obnovlenie-dns-servera-bind-c-ustraneniem-uyazvimosti-v-realizaczii-dns-over-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/obnovlenie-dns-servera-bind-c-ustraneniem-uyazvimosti-v-realizaczii-dns-over-https","title":{"rendered":"DNS-serveri BIND uuendus, mis k\u00f5rvaldab haavatavuse DNS-over-HTTPS rakenduses","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

On avaldatud DNS-serveri BIND stabiilsete versioonide 9.16.28 ja 9.18.3 parandavad uuendused ning samuti uus katsetav versioon 9.19.1. Versioonides 9.18.3 ja 9.19.1 on parandatud haavatavust (CVE-2022-1183) DNS-over-HTTPS mehhanismi rakenduses, mis on toetatud alates 9.18 versioonist. See haavatavus v\u00f5ib p\u00f5hjustada named protsessi ootamatut l\u00f5petamist juhul, kui TLS-\u00fchendus HTTP-protokollil p\u00f5hineva t\u00f6\u00f6tlejaga katkeb enneaegselt. Probleem puudutab ainult serverid<\/a>, mis t\u00f6\u00f6tlevad DNS over HTTPS (DoH) p\u00e4ringuid. Serverid, mis aktsepteerivad p\u00e4ringuid DNS over TLS (DoT) ja ei kasuta DoH-i, ei ole probleemile vastuv\u00f5tlikud. <\/p>\n

Versioonis 9.18.3 on sisse viidud mitmeid funktsionaalseid t\u00e4iustusi. On lisatud toetust tsoonide katalooge teisele versioonile (\"Catalog Zones\"), mis on m\u00e4\u00e4ratletud IETF-i viies mustandis. Tsoonide kataloog pakub uut meetodit sekundaarsete DNS-serverite haldamiseks, kus eraldi kirjeid iga sekundaari tsooni jaoks ei m\u00e4\u00e4ratleta sekundaarserveris, vaid esmaste ja sekundaarsete serverite vahel korraldatakse teatud kogumi sekundaarsete tsoonide edastamine. See t\u00e4hendab, et seadistades katalooge edastama sarnaselt eraldi tsoonide \u00fclekandele, luuakse esmases serveris loodud tsoonid, mis on m\u00e4rgitud kuuluvana kataloogi, automaatselt sekundaarserveris ilma konfiguratsioonifailide muutmiseta. <\/p>\n

Uues versioonis on lisatud ka laiendatud vigade koodide toetus \"Stale Answer\" ja \"Stale NXDOMAIN Answer\", mis antakse v\u00e4lja, kui vananenud vastus tagastatakse vahem\u00e4lust. Nimetatud ja digitud on sisse ehitatud v\u00f5imalus v\u00e4liste t\u00f5endite kontrollimiseks. TLS-sertifikaatide<\/a>, mida saab kasutada rangete v\u00f5i \u00fchiselt v\u00e4lja t\u00f6\u00f6tatud TLS (RFC 9103) autentimise korraldamiseks.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0442\u043e\u043a DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 BIND 9.16.28 \u0438 9.18.3, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u043e\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 9.19.1. \u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 9.18.3 \u0438 9.19.1 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-1183) \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 DNS-over-HTTPS, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0442\u043a\u0438 9.18. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e\u043c\u0443 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 named \u0432 \u0441\u043b\u0443\u0447\u0430\u0435, \u0435\u0441\u043b\u0438 TLS-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043a \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0443 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 HTTP \u0431\u0443\u0434\u0435\u0442 \u0434\u043e\u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043e\u0440\u0432\u0430\u043d\u043e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104087","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47DNS-serveri BIND uuendus koos DNS-over-HTTPS rakendamise haavatavuse k\u00f5rvaldamisega | ProHoster","description":"On avaldatud DNS-serveri BIND stabiilsete versioonide 9.16.28 ja 9.18.3 parandavad uuendused ning samuti uus katsetav versioon 9.19.1.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/obnovlenie-dns-servera-bind-c-ustraneniem-uyazvimosti-v-realizaczii-dns-over-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 BIND c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 DNS-over-HTTPS | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0442\u043e\u043a DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 BIND 9.16.28 \u0438 9.18.3, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u043e\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 9.19.1.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/obnovlenie-dns-servera-bind-c-ustraneniem-uyazvimosti-v-realizaczii-dns-over-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-05-19T01:36:51+00:00","article:modified_time":"2022-05-19T01:36:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104087","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 18:13:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-05-19 01:37:51","updated":"2026-02-09 18:13:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/104087","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=104087"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/104087\/revisions"}],"predecessor-version":[{"id":159180,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/104087\/revisions\/159180"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=104087"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=104087"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=104087"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}