[j-nsp] Unrecognized ICMP6 type

[Paul Goyette]

Yes, 6.3R1.4 contains the patch.

We have to have you contact JTAC for download instructions because
we do not have the ability to update the external web-site on our
own.  It will be updated later today to reflect the new software
spins.

In any case, the new software will only be available to customers
with support contracts and web-site registrations.

-----Original Message-----
From: Richard A Steenbergen [mailto:ras at e-gerbil.net]
Sent: Monday, June 21, 2004 11:03 AM
To: Paul Goyette
Cc: Wayne E. Bouchard; juniper-nsp at puck.nether.net; Daniel Roesen
Subject: Re: [j-nsp] Unrecognized ICMP6 type


On Mon, Jun 21, 2004 at 10:56:13AM -0700, Paul Goyette wrote:
> As reported earlier, Juniper has released Technical Bulletin
> PSN-2004-06-009 concerning this problem.  Registered customers
> can access the bulletin at
>
>
https://www.juniper.net/alerts/viewalert.jsp?txtAlertNumber=PSN-2004-06-009
>
> Yes, indeed, it is a security vulnerability, and CERT/CC has
> assigned it VU#658859 (although nothing appears on their web
> site yet).

This is fixed in 6.3R1.4 yes? Why is it whenever there is a serious
security problem, the code with the fix is only available by "contacting
JTAC", and is never just available for download?

--
Richard A Steenbergen <ras at e-gerbil.net>       http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)