Chipembenene chiri muBIND 9.16.17 chinoita kuti chimiro cheW chisabatike zvakanaka mumibvunzo yeDNS

Kugadzirisa zvigadziriso zvakatsikiswa kune yakagadzikana BIND 9.16.18 bazi uye mune-budiriro kuyedza 9.17.15 bazi, iro rinogadzirisa yakakomba bug yakaonekwa muBIND 9.16.17 uye 9.17.14 zvakaburitswa svondo rapfuura (zuva rakatevera izvi. zvinoburitswa, vagadziri vakanyevera nezvedambudziko uye vakakurudzira kusaisa shanduro 9.16.17 uye 9.17.14).

Mushanduro 9.16.17 uye 9.17.14, "w" mavara akasiiwa kubva pamatafura emavara madiki uye makuru (maptoupper uye maptolower), izvo zvakakonzera kutsiviwa kwemavara "W" uye "w" mumazita edomasi ane kutevedzana "\000" "uye kudzosa mhedzisiro isiriyo paunenge uchigadzirisa zvikumbiro uchishandisa mask. Semuenzaniso, kana nzvimbo yeDNS iine rekodhi “*.sub.test.local. 1 Chikumbiro chezita rekuti UVW.sub.test.local 127.0.0.1″ chaburitsa mhinduro yakadzosa zita rekuti "uv/000.sub.test.local" pane kuti "uvw.sub.test.local".

Pamusoro pezvo, matambudziko akacherechedzwa nekutsiva iyo "w" hunhu ne "\000" panguva yekuchinja kwenzvimbo yekuvandudza kana nyaya ye "w" hunhu muchikumbiro ichisiyana kubva kune iyo DNS zone. Semuyenzaniso, kana imwe update yakatumirwa ye "foo.ww.example." paive nerekodhi "WW.example." munharaunda, yakaitwa se"foo.\000\000.example.". Matambudziko nekutsiva hunhu anogonawo kuitika kana uchifambisa nzvimbo kubva kune yekutanga kuenda kune yechipiri DNS server.

Kuburitswa kwekuvandudza 9.16.18 kwakanonoka nekuda kwekuzivikanwa kwezvimwe zvikanganiso zviviri zvakasara zvisina kugadziriswa mushanduro 9.16.18 uye 9.17.15. Zvikanganiso zvinokonzeresa kuparara panguva yekutanga uye zvinoitika mukumisikidzwa uko dnssec-policy inoshandisa nzvimbo dzakafanana dziripo mumaonero akasiyana. Vashandisi vane marongero akadai vanorairwa kudzikisira kuBIND vhezheni 9.16.16.

Source: opennet.ru