[src/netbsd-3-0]: src/doc Ticket 1967.

[jdc <jdc%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/1277ab68a458
branches:  netbsd-3-0
changeset: 579509:1277ab68a458
user:      jdc <jdc%NetBSD.org@localhost>
date:      Fri Oct 03 10:48:10 2008 +0000

description:
Ticket 1967.

diffstat:

 doc/CHANGES-3.0.4 |  11 ++++++++++-
 1 files changed, 10 insertions(+), 1 deletions(-)

diffs (22 lines):

diff -r b5b7004bc624 -r 1277ab68a458 doc/CHANGES-3.0.4
--- a/doc/CHANGES-3.0.4 Fri Oct 03 10:44:25 2008 +0000
+++ b/doc/CHANGES-3.0.4 Fri Oct 03 10:48:10 2008 +0000
@@ -1,4 +1,4 @@
-#      $NetBSD: CHANGES-3.0.4,v 1.1.2.33 2008/10/03 09:22:15 jdc Exp $
+#      $NetBSD: CHANGES-3.0.4,v 1.1.2.34 2008/10/03 10:48:10 jdc Exp $
 
 A complete list of changes from the NetBSD 3.0.3 release to the NetBSD 3.0.4
 release:
@@ -1180,3 +1180,12 @@
        Implement improved checking for MTU values on ICMP 'Packet Too Big
        Messages'
        [adrianp, ticket #1966]
+
+src/sys/netinet6/in6.c                         1.141 via patch
+src/sys/netinet6/in6_var.h                     1.59 via patch
+src/sys/netinet6/nd6_nbr.c                     1.89-1.90 via patch
+       If a neighbor solictation isn't from the unspecified address,
+       make sure that the source address matches one of the interfaces
+       address prefixes.  Fixes CVE-2008-2476/VU#472363.
+       [adrianp, ticket #1967]
+