[src/netbsd-3-0]: src/doc Ticket #1733.

[ghen <ghen%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/2226aa869379
branches:  netbsd-3-0
changeset: 579395:2226aa869379
user:      ghen <ghen%NetBSD.org@localhost>
date:      Thu Mar 29 09:09:21 2007 +0000

description:
Ticket #1733.

diffstat:

 doc/CHANGES-3.0.3 |  12 +++++++++++-
 1 files changed, 11 insertions(+), 1 deletions(-)

diffs (23 lines):

diff -r 752f28a832b5 -r 2226aa869379 doc/CHANGES-3.0.3
--- a/doc/CHANGES-3.0.3 Thu Mar 29 08:53:44 2007 +0000
+++ b/doc/CHANGES-3.0.3 Thu Mar 29 09:09:21 2007 +0000
@@ -1,4 +1,4 @@
-#      $NetBSD: CHANGES-3.0.3,v 1.1.2.27 2007/03/10 11:53:50 bouyer Exp $
+#      $NetBSD: CHANGES-3.0.3,v 1.1.2.28 2007/03/29 09:09:21 ghen Exp $
 
 A complete list of changes from the NetBSD 3.0.2 release to the NetBSD 3.0.3
 release:
@@ -1567,3 +1567,13 @@
        for AUDIO_WSEEK. Fix PR#35171.
        [kent, ticket #1678]
 
+sys/netiso/clnp_subr.c                         1.27 via patch
+
+       The clnp(4) functions now check the length of arguments passed and will
+       return an appropriate error if the value passed is to large.  This
+       prevents a local denial of service and privilege escalation attack.
+
+       Issue found by Christer Oberg and patch from christos.
+       (NetBSD-SA2007-004)
+       [adrianp, ticket #1733]
+