Chiwopsezo chakugwiritsa ntchito ma code akutali mu seva ya Unbound DNS

Mu seva ya Unbound DNS kudziwika kusatetezeka (CVE-2019-18934), zomwe zingayambitse kuchitidwa kwa code yowukira mukalandira mayankho opangidwa mwapadera. Machitidwe amangokhudzidwa ndi vutoli pomanga Zopanda malire ndi ipsec module ("-enable-ipsecmod") ndi ipsecmod yothandizidwa muzokonda. Chiwopsezo chikuwoneka kuyambira pa mtundu 1.6.4 ndipo chimakhazikika pakumasulidwa Zosasinthika 1.9.5.

Chiwopsezochi chimayamba chifukwa chotumiza zilembo zomwe sizinapulumuke poyimba lamulo la chipolopolo cha ipsecmod-hook polandira pempho la domeni yomwe ma A/AAAA ndi ma rekodi a IPSECKEY alipo. Kusintha kwa code kumachitika pofotokoza dzina lachidziwitso lopangidwa mwapadera m'magawo a qname ndi zipata zolumikizidwa ndi mbiri ya IPSECKEY.

Source: opennet.ru