[src/netbsd-2]: src/doc ticket 11330

[bouyer <bouyer%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/7e9f5b716965
branches:  netbsd-2
changeset: 564602:7e9f5b716965
user:      bouyer <bouyer%NetBSD.org@localhost>
date:      Mon Jun 04 19:27:14 2007 +0000

description:
ticket 11330

diffstat:

 doc/CHANGES-2.2 |  13 ++++++++++++-
 1 files changed, 12 insertions(+), 1 deletions(-)

diffs (24 lines):

diff -r 6acf3da164ae -r 7e9f5b716965 doc/CHANGES-2.2
--- a/doc/CHANGES-2.2   Mon Jun 04 19:22:52 2007 +0000
+++ b/doc/CHANGES-2.2   Mon Jun 04 19:27:14 2007 +0000
@@ -1,4 +1,4 @@
-#      $NetBSD: CHANGES-2.2,v 1.1.2.110 2007/05/30 19:55:02 bouyer Exp $
+#      $NetBSD: CHANGES-2.2,v 1.1.2.111 2007/06/04 19:27:14 bouyer Exp $
 
 A complete list of changes from the NetBSD 2.1 release to the NetBSD 2.2 
 release
@@ -1187,3 +1187,14 @@
        Merge tzdata2007f.
        [markd, ticket #11320]
 
+sys/netinet6/ip6_input.c: revision 1.102 via patch
+sys/netinet6/route6.c: revision 1.18 via patch
+sys/netinet6/ip6_var.h: revisions 1.41 - 1.42 via patch
+sbin/sysctl/sysctl.8: patch
+       Disable processing of routing header type 0 packets since they can be
+       used of DoS attacks. Provide a sysctl to re-enable them
+       (net.inet6.ip6.rht0).
+       Information from:
+               http://www.secdev.org/conf/IPv6_RH_security-csw07.pdf
+       [adrianp, ticket #11330]
+