From: Tatuya JINMEI 神明達哉 Date: Mon, 23 Jun 2008 23:59:28 +0000 (+0000) Subject: give a new change number to query port randomization X-Git-Tag: v9.3.6b1~125^2~5 X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=8aae2264818e1511fa30c3ef5c3dc7669e347d3c;p=thirdparty%2Fbind9.git give a new change number to query port randomization --- diff --git a/CHANGES b/CHANGES index 4431c6c0501..c762e6d8f10 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,6 @@ +2384. [security] Fully randomize UDP query ports to improve + forgery resilience. [RT #17949, #18098] + 2383. [bug] named could double queries when they resulted in SERVFAIL due to overkilling EDNS0 failure detection. [RT #18182] @@ -24,8 +27,7 @@ 2376. [bug] Change #2144 was not complete. -2375. [security] Fully randomize UDP query ports to improve - forgery resilience. [RT #17949, #18098] +2375. [placeholder] 2374. [bug] "blackhole" ACLs could cause named to segfault due to some uninitialized memory. [RT #18095]