Cov chaw taws teeb tswj hwm qhov tsis zoo hauv Unbound DNS server

Hauv Unbound DNS server txheeb xyuas yooj yim (CVE-2019-18934), uas tuaj yeem ua rau kev ua tiav ntawm tus neeg tawm tsam code thaum tau txais cov lus teb tshwj xeeb. Cov kab ke tsuas yog cuam tshuam los ntawm qhov teeb meem thaum tsim Unbound nrog ipsec module ("--enable-ipsecmod") thiab ipsecmod enabled hauv cov chaw. Qhov tsis zoo tshwm sim pib los ntawm version 1.6.4 thiab raug kho hauv qhov kev tso tawm Unbound 1.9.5.

Qhov tsis zoo yog tshwm sim los ntawm kev sib kis ntawm cov cim tsis tau txais kev cawmdim thaum hu rau ipsecmod-hook plhaub hais kom ua thaum tau txais kev thov rau lub npe uas A / AAAA thiab IPSECKEY cov ntaub ntawv tam sim no. Kev hloov pauv code yog ua los ntawm kev qhia tshwj xeeb tsim lub npe sau npe hauv qname thiab rooj vag teb cuam tshuam nrog IPSECKEY cov ntaub ntawv.

Tau qhov twg los: opennet.ru

Ntxiv ib saib