Umm maybe its just but I fail to see why this is a security advisory (initially caught this on the OBSD list). You are following the RFC .. if you don't like "evil" packets, then drop them at the firewall or router layer ... don't see the need for an OS fix.