Sabuntawar gyara zuwa ga tabbatattun rassan BIND DNS uwar garken 9.11.18 da 9.16.2, da kuma reshen gwaji 9.17.1, wanda ke ci gaba. A cikin sabbin sakewa matsalar tsaro da ke da alaƙa da rashin ingantaccen tsaro daga hare-hare "»lokacin aiki a yanayin buƙatun isar da sabar sabar DNS (toshewar “forwarders” a cikin saitunan). Bugu da ƙari, an yi aiki don rage girman ƙididdiga na sa hannu na dijital da aka adana a ƙwaƙwalwar ajiya don DNSSEC - an rage adadin maɓallan da aka sa ido zuwa 4 ga kowane yanki, wanda ya isa a cikin 99% na lokuta.
Dabarar “Rebinding DNS” tana ba da damar, lokacin da mai amfani ya buɗe wani shafi a cikin mai bincike, don kafa hanyar haɗin yanar gizo ta WebSocket zuwa sabis na cibiyar sadarwa akan hanyar sadarwar ciki wacce ba a samun damar kai tsaye ta Intanet. Don ƙetare kariyar da aka yi amfani da ita a cikin masu bincike don ƙetare iyakokin yankin na yanzu (asali-giciye), canza sunan mai watsa shiri a cikin DNS. An saita uwar garken DNS na maharin don aika adiresoshin IP guda biyu daya bayan daya: buƙatun farko na aika ainihin IP na uwar garken tare da shafin, kuma buƙatun na gaba suna mayar da adireshin ciki na na'urar (misali, 192.168.10.1).
Lokacin rayuwa (TTL) don amsawar farko an saita zuwa ƙaramin ƙima, don haka lokacin buɗe shafin, mai binciken yana tantance ainihin IP na uwar garken maharin kuma yana loda abubuwan da ke cikin shafin. Shafin yana gudanar da lambar JavaScript wanda ke jiran TTL ya ƙare kuma ya aika buƙatu na biyu, wanda yanzu ya bayyana mai masaukin a matsayin 192.168.10.1. Wannan yana ba JavaScript damar samun damar sabis a cikin hanyar sadarwar gida, ketare ƙuntatawa ta asali. a kan irin waɗannan hare-hare a cikin BIND ya dogara ne akan toshe sabar na waje daga dawo da adiresoshin IP na cibiyar sadarwar cikin gida na yanzu ko laƙabin CNAME don yanki na gida ta amfani da adiresoshin-amsa-amsa da saitunan-amsa-alases.
source: budenet.ru