adns 1.7.0 - randomised query ids (better security)

[Ian Jackson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

I am pleased to release adns 1.7.0.

adns is a DNS resolver library for C (and C++) programs, and a
collection of useful DNS lookup utilities.  The C library, and the
command line utilities, provide a convenient interface.  adns is
capable of doing DNS lookups in an asynchronous, event-driven,
fashion.

For more information about adns, please see:
  https://www.chiark.greenend.org.uk/~ian/adns/

adns 1.7.0 selects query-ids randomly which is a security improvement
in situations where attackers could impersonate your nameserver.
adns is now just as good in this respect as other stub resolvers (eg glibc).

You can obtain adns from the git repository
  https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git/adns.git/
There are signed git tags for each version.

There are tarballs available via the web page, above.
Version 1.7.0 has also been uploaded to Debian unstable.

adns (1.7.0) UPSTREAM; urgency=medium

  * Select query IDs randomly using getentropy, if we can.
    See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1145407.
  * Test harness: minor tidying up re input file reading.
  * README: Ask for bugs to go to Debian.
  * This changelog: Remove obsolete Emacs local variables section.

 -- Ian Jackson <ijackson at chiark.greenend.org.uk>  Fri, 11 Sep 2026 13:35:34 +0100
-----BEGIN PGP SIGNATURE-----
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=XCQd
-----END PGP SIGNATURE-----

-- 
Ian Jackson <ijackson at chiark.greenend.org.uk>   These opinions are my own.  

Pronouns: they/he.  If I emailed you from @fyvzl.net or @evade.org.uk,
that is a private address which bypasses my fierce spamfilter.