New release notes: wi(4) Prism II/2.5 support + WEP fixes (+ MFC),

IPSec inbound SPD fix for IPv4 (+ MFC), ata(4) RAID1 rebuild,
/etc/rc.firewall{,6} don't add their own implicit rules (+ MFC).

MFCs noted:  puc(4)

2 files changed, 42 insertions, 2 deletions

diff --git a/release/doc/en_US.ISO8859-1/relnotes/article.sgml b/release/doc/en_US.ISO8859-1/relnotes/article.sgml
index 6afb0eb..8dce791 100644
--- a/release/doc/en_US.ISO8859-1/relnotes/article.sgml
+++ b/release/doc/en_US.ISO8859-1/relnotes/article.sgml
@@ -235,7 +235,7 @@
 
     <para arch="i386">The &man.puc.4; (PCI <quote>Universal</quote>
       Communications) driver has been added, to help connect PCI-based
-      serial ports to the &man.sio.4; driver.</para>
+      serial ports to the &man.sio.4; driver. &merged;</para>
 
     <para>The &man.random.4; device has been rewritten to use the
       <application>Yarrow</application> algorithm.  It harvests
@@ -686,6 +686,10 @@
       <para>&man.vlan.4; devices are now loadable, unloadable, and
 	clonable. &merged;</para>
 
+      <para>The &man.wi.4; driver now has support for Prism II and
+	Prism 2.5-based NICs.  104/128-bit WEP now works on Prism
+	cards. &merged;</para>
+
       <para>The &man.xl.4; driver now supports the 3Com 3C556 and
 	3C556B MiniPCI adapters used on some laptops. &merged;</para>
 
@@ -781,6 +785,9 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
       <para>IP multicast now works on VLAN devices.  Several other
 	bugs in the VLAN code have also been fixed.</para>
 
+      <para>A bug in the IPSec processing for IPv4, which caused the
+	inbound SPD checks to be ignored, has been fixed. &merged;</para>
+
       <para>&man.ipfw.4; now filters correctly in the presence of ECN
 	bits in TCP segments. &merged;</para>
 
@@ -958,6 +965,10 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
       <para>The &man.ata.4; driver now supports a wider variety of SiS
 	chipsets, as listed in the Hardware Notes. &merged;</para>
 
+      <para>The &man.ata.4; driver now has support for rebuilding
+	failed drives in a RAID1 configuration, under control of
+	&man.atacontrol.8;</para>
+
       <para>The BurnProof(TM) feature, for applicable ATAPI CD-ROM
 	burners, is now supported. &merged;</para>
 
@@ -1775,6 +1786,15 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
       allow limiting the prototype quota distribution (specified with
       <option>-p</option>) to a single filesystem. &merged;</para>
 
+    <para><filename>/etc/rc.firewall</filename> and
+      <filename>/etc/rc.firewall6</filename> will no longer add their own
+      hardcoded rules in the cases of a rules file in the
+      <varname>firewall_type</varname> variable or a non-existent
+      firewall type.  (The motivation for this change is to avoid
+      acting on assumptions about a site's firewall policies.)  In
+      addition, the <literal>closed</literal> firewall type now works
+      as documented in the &man.rc.firewall.8; manual page. &merged;</para>
+
     <para>The functionality of <filename>/etc/security</filename> has
       been been moved into a set of scripts under the &man.periodic.8;
       framework, to make local customization easier and more
diff --git a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml
index 6afb0eb..8dce791 100644
--- a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml
+++ b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml
@@ -235,7 +235,7 @@
 
     <para arch="i386">The &man.puc.4; (PCI <quote>Universal</quote>
       Communications) driver has been added, to help connect PCI-based
-      serial ports to the &man.sio.4; driver.</para>
+      serial ports to the &man.sio.4; driver. &merged;</para>
 
     <para>The &man.random.4; device has been rewritten to use the
       <application>Yarrow</application> algorithm.  It harvests
@@ -686,6 +686,10 @@
       <para>&man.vlan.4; devices are now loadable, unloadable, and
 	clonable. &merged;</para>
 
+      <para>The &man.wi.4; driver now has support for Prism II and
+	Prism 2.5-based NICs.  104/128-bit WEP now works on Prism
+	cards. &merged;</para>
+
       <para>The &man.xl.4; driver now supports the 3Com 3C556 and
 	3C556B MiniPCI adapters used on some laptops. &merged;</para>
 
@@ -781,6 +785,9 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
       <para>IP multicast now works on VLAN devices.  Several other
 	bugs in the VLAN code have also been fixed.</para>
 
+      <para>A bug in the IPSec processing for IPv4, which caused the
+	inbound SPD checks to be ignored, has been fixed. &merged;</para>
+
       <para>&man.ipfw.4; now filters correctly in the presence of ECN
 	bits in TCP segments. &merged;</para>
 
@@ -958,6 +965,10 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
       <para>The &man.ata.4; driver now supports a wider variety of SiS
 	chipsets, as listed in the Hardware Notes. &merged;</para>
 
+      <para>The &man.ata.4; driver now has support for rebuilding
+	failed drives in a RAID1 configuration, under control of
+	&man.atacontrol.8;</para>
+
       <para>The BurnProof(TM) feature, for applicable ATAPI CD-ROM
 	burners, is now supported. &merged;</para>
 
@@ -1775,6 +1786,15 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
       allow limiting the prototype quota distribution (specified with
       <option>-p</option>) to a single filesystem. &merged;</para>
 
+    <para><filename>/etc/rc.firewall</filename> and
+      <filename>/etc/rc.firewall6</filename> will no longer add their own
+      hardcoded rules in the cases of a rules file in the
+      <varname>firewall_type</varname> variable or a non-existent
+      firewall type.  (The motivation for this change is to avoid
+      acting on assumptions about a site's firewall policies.)  In
+      addition, the <literal>closed</literal> firewall type now works
+      as documented in the &man.rc.firewall.8; manual page. &merged;</para>
+
     <para>The functionality of <filename>/etc/security</filename> has
       been been moved into a set of scripts under the &man.periodic.8;
       framework, to make local customization easier and more