Kusintha seva ya BIND DNS kuti muchepetse chiwopsezo pakukhazikitsa kwa DNS-over-HTTPS

Zosintha zowongolera ku nthambi zokhazikika za BIND DNS seva 9.16.28 ndi 9.18.3 zasindikizidwa, komanso kumasulidwa kwatsopano kwa nthambi yoyesera 9.19.1. M'mitundu 9.18.3 ndi 9.19.1, chiwopsezo (CVE-2022-1183) pakukhazikitsa njira ya DNS-over-HTTPS, yothandizidwa kuyambira nthambi 9.18, yakhazikitsidwa. Kusatetezeka kumapangitsa kuti njira yomwe yatchulidwayo iwonongeke ngati kulumikizidwa kwa TLS ku chothandizira chochokera pa HTTP kuthetsedwa msanga. Nkhaniyi imangokhudza ma seva omwe amagwiritsa ntchito DNS pazopempha za HTTPS (DoH). Maseva omwe amavomereza mafunso a DNS pa TLS (DoT) ndipo sagwiritsa ntchito DoH sakhudzidwa ndi nkhaniyi.

Kutulutsidwa 9.18.3 kumawonjezeranso kusintha kwa magwiridwe antchito angapo. Thandizo lowonjezera la mtundu wachiwiri wa magawo a catalog ("Catalog Zones"), zofotokozedwa mundondomeko yachisanu ya ndondomeko ya IETF. Zone Directory imapereka njira yatsopano yosungira ma seva achiwiri a DNS momwe, m'malo mofotokozera zolemba zapadera zagawo lililonse lachiwiri pa seva yachiwiri, magawo ena achiwiri amasamutsidwa pakati pa ma seva oyambira ndi achiwiri. Iwo. Pokhazikitsa kusamutsidwa kwa bukhu lofanana ndi kusamutsidwa kwa madera amodzi, madera omwe adapangidwa pa seva yoyamba ndikuyika chizindikiro kuti akuphatikizidwa mu bukhuli adzapangidwa pa seva yachiwiri popanda kufunikira kosintha mafayilo osintha.

Mtundu watsopanowu umawonjezeranso chithandizo cha "Stale Yankho" ndi "Stale NXDOMAIN Yankho" ma code olakwika, operekedwa pomwe yankho lakale labwezedwa kuchokera pankhokwe. otchulidwa ndi kukumba ali ndi zitsimikiziro zokhazikika za satifiketi zakunja za TLS, zomwe zitha kugwiritsidwa ntchito kukhazikitsa kutsimikizika kolimba kapena kogwirizana kutengera TLS (RFC 9103).

Source: opennet.ru

Kuwonjezera ndemanga