[src/netbsd-3-0]: src/doc Ticket #1766.

[ghen <ghen%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/0497578b6ccb
branches:  netbsd-3-0
changeset: 579411:0497578b6ccb
user:      ghen <ghen%NetBSD.org@localhost>
date:      Thu Apr 26 06:56:40 2007 +0000

description:
Ticket #1766.

diffstat:

 doc/CHANGES-3.0.3 |  15 ++++++++++++++-
 1 files changed, 14 insertions(+), 1 deletions(-)

diffs (26 lines):

diff -r 9cbf205346cd -r 0497578b6ccb doc/CHANGES-3.0.3
--- a/doc/CHANGES-3.0.3 Thu Apr 26 06:55:37 2007 +0000
+++ b/doc/CHANGES-3.0.3 Thu Apr 26 06:56:40 2007 +0000
@@ -1,4 +1,4 @@
-#      $NetBSD: CHANGES-3.0.3,v 1.1.2.36 2007/04/25 09:17:23 ghen Exp $
+#      $NetBSD: CHANGES-3.0.3,v 1.1.2.37 2007/04/26 06:56:40 ghen Exp $
 
 A complete list of changes from the NetBSD 3.0.2 release to the NetBSD 3.0.3
 release:
@@ -1654,3 +1654,16 @@
        similar dependences as the "rtsold" script.
        [tron, ticket #1767]
 
+sbin/sysctl/sysctl.8                           patch
+sys/netinet6/ip6_input.c                       1.102 via patch
+sys/netinet6/ip6_var.h                         1.41-1.42 via patch
+sys/netinet6/route6.c                          1.18 via patch
+
+       Disable processing of routing header type 0 packets since they
+       can be used of DoS attacks. Provide a sysctl to re-enable them
+       (net.inet6.ip6.rht0).
+
+       Information from:
+       http://www.secdev.org/conf/IPv6_RH_security-csw07.pdf
+       [christos, ticket #1766]
+