diff options
| author | Shulhan <ms@kilabit.info> | 2023-11-09 21:10:58 +0700 |
|---|---|---|
| committer | Shulhan <ms@kilabit.info> | 2023-11-09 21:54:29 +0700 |
| commit | cddfc60f10b51b02f58f223fd7177e28c0343cb7 (patch) | |
| tree | f18ce39643b11914181b6fb8d972abd546f0ff1a /CHANGELOG.adoc | |
| parent | 40ed71777ebffc5b6954c490ad65010f2445be60 (diff) | |
| download | rescached-4.4.2.tar.xz | |
Release rescached v4.4.2 (2023-11-10)v4.4.2
* all: remove loading system hosts file::
Loading and caching system hosts file (for example, /etc/hosts in
POSIX) will leaks internal hosts if the rescached server is open to
public.
The system hosts file are handled by nssswitch.conf "files" internally
so no need to loading it.
* cmd/resolver: replace "math/rand" with "crypto/rand"::
The random number from "math/rand" is predictable if the seed is
known. Even though the random number here is only for generating unique
request ID, we still need to prevent this by using more secure random
number.
Diffstat (limited to 'CHANGELOG.adoc')
| -rw-r--r-- | CHANGELOG.adoc | 21 |
1 files changed, 20 insertions, 1 deletions
diff --git a/CHANGELOG.adoc b/CHANGELOG.adoc index a4aa256..d624e86 100644 --- a/CHANGELOG.adoc +++ b/CHANGELOG.adoc @@ -1,13 +1,32 @@ // SPDX-FileCopyrightText: 2019 M. Shulhan <ms@kilabit.info> // SPDX-License-Identifier: GPL-3.0-or-later = Changelog for rescached -Shulhan <ms@kilabit.info> :toc: :sectanchors: :sectlinks: Log of new features, enhancements, and/or bug fixes for each release. +[#v4_4_2] +== rescached v4.4.2 (2023-11-10) + +all: remove loading system hosts file:: ++ +-- +Loading and caching system hosts file (for example, /etc/hosts in POSIX) +will leaks internal hosts if the rescached server is open to public. + +The system hosts file are handled by nssswitch.conf "files" internally +so no need to loading it. +-- + +cmd/resolver: replace "math/rand" with "crypto/rand":: ++ +The random number from "math/rand" is predictable if the seed is known. +Even though the random number here is only for generating unique request +ID, we still need to prevent this by using more secure random number. + + [#v4_4_1] == rescached v4.4.1 (2023-04-01) //{{{ |