Date: Sat, 12 Nov 2022 19:47:32 GMT From: =?utf-8?Q?Fernando=20Apestegu=C3=ADa?= <fernape@FreeBSD.org> To: doc-committers@FreeBSD.org, dev-commits-doc-all@FreeBSD.org Subject: git: 30c0e36c9c - main - 12.4 Release notes: More typos and fixes. Message-ID: <202211121947.2ACJlWte057286@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch main has been updated by fernape: URL: https://cgit.FreeBSD.org/doc/commit/?id=30c0e36c9c1b6265a3a6353049ee24c36edcf3f5 commit 30c0e36c9c1b6265a3a6353049ee24c36edcf3f5 Author: Fernando ApesteguĂa <fernape@FreeBSD.org> AuthorDate: 2022-11-12 18:47:03 +0000 Commit: Fernando ApesteguĂa <fernape@FreeBSD.org> CommitDate: 2022-11-12 18:47:03 +0000 12.4 Release notes: More typos and fixes. Reported by: pauamma@ --- website/content/en/releases/12.4R/relnotes.adoc | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/website/content/en/releases/12.4R/relnotes.adoc b/website/content/en/releases/12.4R/relnotes.adoc index 08b810078a..e65c7c13a2 100644 --- a/website/content/en/releases/12.4R/relnotes.adoc +++ b/website/content/en/releases/12.4R/relnotes.adoc @@ -276,9 +276,10 @@ This section describes changes that affect networking in FreeBSD. [[network-general]] === General Network -The man:dummynet[4] system facility had an out-of-bounds bug fixed as well as a bug regarding he validation of the length of socket options. +The man:dummynet[4] system facility had an out-of-bounds bug fixed as well as a bug regarding the validation of the length of socket options. -The man:ipfilter[4] packet filter added the `SDT` and `DT5` man:dtrace[1] probes. It has grown the capacity of dumping a copy of ippool in ippool.conf format. From now on, man:ipfilter[4] only allow jails to manipulate ipfilter rules, NAT tables and ippools if the jail has its own VNET to improve security. A number of other improvements have been implemented. +The man:ipfilter[4] packet filter added the `SDT` and `DT5` man:dtrace[1] probes. It now has the ability to dump a copy of ippool in ippool.conf format. +From now on, to improve security, man:ipfilter[4] only allows jails to manipulate ipfilter rules, NAT tables, and ippools if the jail has its own VNET. A number of other improvements have been implemented. The man:netmap[4] framework had a fix for a TOCTOU vulnerability as well as a bug regarding an integer overflow.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202211121947.2ACJlWte057286>
