backport ipv6 security fix to 2.4 (#4245)