news.debuntu.org

Resolved Bugs449345 - CVE-2008-1447 implement source UDP port randomization (CERT VU#800113)This fixes the same security bug that other resolvers have been hit
with dealing with random source port numbers. The libval library
contained within the DNSSEC-Tools package has the same issue.
Although DNSSEC will protect against the issue, since most zones
aren't signed any applications linked to the 1.4 version of the
library are vulnerable.