diff options
| author | akr <akr@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2008-08-08 01:58:40 +0000 |
|---|---|---|
| committer | akr <akr@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2008-08-08 01:58:40 +0000 |
| commit | 6c1bb8051cd5bb6d2a25de55f8978d062a824d56 (patch) | |
| tree | 6392f23799c3d1dbdf379e4444c6456ad01e1746 /ChangeLog | |
| parent | 2966925e9e2fbc4738bc0fc6f2095f7cd222750b (diff) | |
| download | ruby-6c1bb8051cd5bb6d2a25de55f8978d062a824d56.tar.gz ruby-6c1bb8051cd5bb6d2a25de55f8978d062a824d56.tar.xz ruby-6c1bb8051cd5bb6d2a25de55f8978d062a824d56.zip | |
* lib/resolv.rb: randomize source port and transaction id.
CVE-2008-1447.
* lib/resolv-replace.rb (UDPSocket#bind): don't resolv host if host is
"".
git-svn-id: http://svn.ruby-lang.org/repos/ruby/trunk@18424 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
Diffstat (limited to 'ChangeLog')
| -rw-r--r-- | ChangeLog | 8 |
1 files changed, 8 insertions, 0 deletions
@@ -1,3 +1,11 @@ +Fri Aug 8 10:53:52 2008 Tanaka Akira <akr@fsij.org> + + * lib/resolv.rb: randomize source port and transaction id. + CVE-2008-1447. + + * lib/resolv-replace.rb (UDPSocket#bind): don't resolv host if host is + "". + Fri Aug 8 04:20:14 2008 NARUSE, Yui <naruse@ruby-lang.org> * common.mk: see both $(srcdir)/enc/trans and enc/trans. |