[src/netbsd-2]: src/doc Ticket #11256.

[ghen <ghen%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/ea7f48b05d7b
branches:  netbsd-2
changeset: 564583:ea7f48b05d7b
user:      ghen <ghen%NetBSD.org@localhost>
date:      Thu Mar 29 09:09:37 2007 +0000

description:
Ticket #11256.

diffstat:

 doc/CHANGES-2.2 |  12 +++++++++++-
 1 files changed, 11 insertions(+), 1 deletions(-)

diffs (23 lines):

diff -r 910418c0b81d -r ea7f48b05d7b doc/CHANGES-2.2
--- a/doc/CHANGES-2.2   Thu Mar 29 08:57:07 2007 +0000
+++ b/doc/CHANGES-2.2   Thu Mar 29 09:09:37 2007 +0000
@@ -1,4 +1,4 @@
-#      $NetBSD: CHANGES-2.2,v 1.1.2.102 2007/02/20 15:53:23 tron Exp $
+#      $NetBSD: CHANGES-2.2,v 1.1.2.103 2007/03/29 09:09:37 ghen Exp $
 
 A complete list of changes from the NetBSD 2.1 release to the NetBSD 2.2 
 release
@@ -1078,3 +1078,13 @@
        Fix problems with Seagate ST318203LSUN18G.
        [bouyer, ticket #11051]
 
+sys/netiso/clnp_subr.c                         1.27 via patch
+
+       The clnp(4) functions now check the length of arguments passed and will
+       return an appropriate error if the value passed is to large.  This
+       prevents a local denial of service and privilege escalation attack.
+
+       Issue found by Christer Oberg and patch from christos.
+       (NetBSD-SA2007-004)
+       [adrianp, ticket #11256]
+