git: 9784b45a8e - main - 12.4 Release notes: Improve net80211 entry

Lorenzo Salvadore <[email protected]>
Newsgroups gmane.os.freebsd.devel.cvs.doc
Message-ID <[email protected]>
The branch main has been updated by salvadore (ports committer):

URL: https://cgit.FreeBSD.org/doc/commit/?id=9784b45a8e258b091639c0df6db49fdf2b02fef9

commit 9784b45a8e258b091639c0df6db49fdf2b02fef9
Author:     Lorenzo Salvadore <[email protected]>
AuthorDate: 2022-11-19 14:19:53 +0000
Commit:     Lorenzo Salvadore <[email protected]>
CommitDate: 2022-11-19 14:56:03 +0000

    12.4 Release notes: Improve net80211 entry
    
    - Split entry into multiple entries sorted chronologically by commit
      date.
    - Add one more change.
    - Add CVE references.
    - Add gitref notes.
    
    Approved by:    re (gjb, implicit)
---
 website/content/en/releases/12.4R/relnotes.adoc | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/website/content/en/releases/12.4R/relnotes.adoc b/website/content/en/releases/12.4R/relnotes.adoc
index d116adb908..1168edcf1d 100644
--- a/website/content/en/releases/12.4R/relnotes.adoc
+++ b/website/content/en/releases/12.4R/relnotes.adoc
@@ -291,7 +291,18 @@ gitref:cf101bd5ceebe2b2d229faa949dbf3e146d04382[repository=src]
 The man:iflib[4] network interface driver framework had a lock order reversal (LOR) fixed.
 gitref:ea25a6af57e0ce1551341e3b1652233cdb11bee1[repository=src]
 
-The man:net80211[4] interface has improved several validations including Mesh ID length and SSID length. It also prevents plaintext injection by A-MSDU RFC1042/EAPOL frames and rejects mixed plaintext/encrypted fragments.
+The man:net80211[4] interface had some mitigations included agains A-MSDU design flaws (CVE-2020-24588).
+gitref:76ee776f4d9f146f7a97ac9bab388c51a1c787c9[repository=src]
+
+The man:net80211[4] interface will now reject mixed plaintext/encrypted fragments (CVE-2020-26147).
+gitref:00cd5a2f614ae2cf1daa30cde7f91de9cdde2393[repository=src]
+
+The man:net80211[4] interface will now prevent plaintext injection by A-MSDU RFC1042/EAPOL frames (CVE-2020-26144).
+gitref:2d09e4366b67dd719ebae5390436868e5430d833[repository=src]
+
+The man:net80211[4] interface has improved several validations including SSID length and Mesh ID length.
+gitref:f4d0e8787a09f4cdfb856924aaca97f1c78b65b1[repository=src]
+gitref:e7c990ba3f8de8c4882390cad9b01a9fa25ad068[repository=src]
 
 The man:pf[4] framework had some memory leaks fixed and now ensures the correct source/destination IP address in ICMP errors. It also provides improved route-to handling of pfsync'd states along with other changes and improvements.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.