git: 30c0e36c9c - main - 12.4 Release notes: More typos and fixes.
Fernando Apesteguía <[email protected]>
| Newsgroups | gmane.os.freebsd.devel.cvs.doc |
|---|---|
| Message-ID | <[email protected]> |
The branch main has been updated by fernape: URL: https://cgit.FreeBSD.org/doc/commit/?id=30c0e36c9c1b6265a3a6353049ee24c36edcf3f5 commit 30c0e36c9c1b6265a3a6353049ee24c36edcf3f5 Author: Fernando Apesteguía <[email protected]> AuthorDate: 2022-11-12 18:47:03 +0000 Commit: Fernando Apesteguía <[email protected]> CommitDate: 2022-11-12 18:47:03 +0000 12.4 Release notes: More typos and fixes. Reported by: pauamma@ --- website/content/en/releases/12.4R/relnotes.adoc | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/website/content/en/releases/12.4R/relnotes.adoc b/website/content/en/releases/12.4R/relnotes.adoc index 08b810078a..e65c7c13a2 100644 --- a/website/content/en/releases/12.4R/relnotes.adoc +++ b/website/content/en/releases/12.4R/relnotes.adoc @@ -276,9 +276,10 @@ This section describes changes that affect networking in FreeBSD. [[network-general]] === General Network -The man:dummynet[4] system facility had an out-of-bounds bug fixed as well as a bug regarding he validation of the length of socket options. +The man:dummynet[4] system facility had an out-of-bounds bug fixed as well as a bug regarding the validation of the length of socket options. -The man:ipfilter[4] packet filter added the `SDT` and `DT5` man:dtrace[1] probes. It has grown the capacity of dumping a copy of ippool in ippool.conf format. From now on, man:ipfilter[4] only allow jails to manipulate ipfilter rules, NAT tables and ippools if the jail has its own VNET to improve security. A number of other improvements have been implemented. +The man:ipfilter[4] packet filter added the `SDT` and `DT5` man:dtrace[1] probes. It now has the ability to dump a copy of ippool in ippool.conf format. +From now on, to improve security, man:ipfilter[4] only allows jails to manipulate ipfilter rules, NAT tables, and ippools if the jail has its own VNET. A number of other improvements have been implemented. The man:netmap[4] framework had a fix for a TOCTOU vulnerability as well as a bug regarding an integer overflow.