Isiphazamisi ku-BIND 9.16.17 esibangela ukuthi uhlamvu luka-W lungaphathwa kahle emibuzweni ye-DNS

Izibuyekezo zokulungisa zishicilelwe egatsheni elizinzile le-BIND 9.16.18 kanye negatsha lesilingo 9.17.15 elithuthukiswayo, elilungisa iphutha elibi elivele ekukhishweni kwe-BIND 9.16.17 kanye no-9.17.14 okushicilelwe ngesonto eledlule (ngosuku olungemva kwalokhu ukukhishwa, abathuthukisi baxwayise ngenkinga futhi batusa ukuthi bangafaki izinguqulo 9.16.17 kanye ne-9.17.14).

Ezinguqulweni ezingu-9.16.17 kanye no-9.17.14, uhlamvu oluthi "w" alufakwanga kumathebula emephu ohlamvu abancane kanye nofeleba abakhulu (i-maptoupper ne-maptolower), okuholele ekushintshweni kwezinhlamvu ze-"W" kanye "ne" emagameni esizinda ukulandelana "\000" "nokubuyisela umphumela ongalungile lapho ucubungula izicelo kusetshenziswa imaski. Isibonelo, uma indawo ye-DNS iqukethe irekhodi β€œ*.sub.test.local. 1 Isicelo esingu-127.0.0.1β€³ segama elithi UVW.sub.test.local" sikhiqize impendulo ebuyise igama elithi "uv/000.sub.test.local" esikhundleni sokuthi "uvw.sub.test.local".

Ngaphezu kwalokho, izinkinga ziphawulwe ngokushintshanisa uhlamvu oluthi β€œw” ngokuthi β€œ\000” phakathi nokubuyekezwa kwendawo eguquguqukayo uma isimo sohlamvu β€œw” esicelweni sihlukile esimweni sendawo ye-DNS. Isibonelo, uma ngabe isibuyekezo sithunyelwe okuthi "foo.ww.example." ngenkathi kunerekhodi elithi "WW.example." endaweni, lacutshungulwa njengokuthi "foo.\000\000.example.". Izinkinga zokushintsha uhlamvu zingase futhi zibe khona lapho kwenziwa ukudluliselwa kwendawo ukusuka kwesisekelo kuya kuseva yesibili ye-DNS.

Ukushicilelwa kwesibuyekezo esingu-9.16.18 kubambezelekile ngenxa yokuhlonzwa kwamanye amaphutha amabili ahlala engaxazululiwe kuzinguqulo 9.16.18 kanye no-9.17.15. Amaphutha aholela ekumisweni kwesikhathi ngesikhathi sokuqalisa futhi enzeka ekucushweni lapho inqubomgomo ye-dnssec isebenzisa izindawo ezifanayo ezikhona ekubukeni okuhlukile. Abasebenzisi abanezilungiselelo ezinjalo bayelulekwa ukuthi behlisele kunguqulo ethi BIND 9.16.16.

Source: opennet.ru

Engeza amazwana