diff --git a/doc/Changelog b/doc/Changelog
index 399ea9b46..f655cb697 100644
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,5 +1,6 @@
 30 August 2012: Wouter
 	- RFC6725 deprecates RSAMD5: this DNSKEY algorithm is disabled.
+	- iana portlist updated.
 
 29 August 2012: Wouter
 	- Nicer comments outgoing-port-avoid, thanks Stu (bug #465).
diff --git a/util/iana_ports.inc b/util/iana_ports.inc
index 9ef8e935a..8260326ed 100644
--- a/util/iana_ports.inc
+++ b/util/iana_ports.inc
@@ -692,7 +692,7 @@
 1022,
 1025,
 1026,
-1028,
+1027,
 1029,
 1030,
 1031,
@@ -3848,6 +3848,7 @@
 4425,
 4426,
 4430,
+4432,
 4441,
 4442,
 4443,
@@ -5241,6 +5242,8 @@
 25901,
 25902,
 25903,
+25954,
+25955,
 26000,
 26133,
 26208,