diff --git a/release/doc/en_US.ISO8859-1/relnotes/article.sgml b/release/doc/en_US.ISO8859-1/relnotes/article.sgml
index c25b6caa788..12a0a31ef4e 100644
--- a/release/doc/en_US.ISO8859-1/relnotes/article.sgml
+++ b/release/doc/en_US.ISO8859-1/relnotes/article.sgml
@@ -148,6 +148,13 @@
jail. More information can be found in security advisory FreeBSD-SA-04:03.
+ A potential low-bandwidth denial-of-service attack against
+ the &os; TCP stack has been prevented by limiting the number of
+ out-of-sequence TCP segments that can be held at one time. More
+ details can be found in security advisory FreeBSD-SA-04:04.
+ &merged;
+
@@ -289,13 +296,6 @@
support for the TCP-MD5 class of security associations.
&merged;
- The TCP segment reassembly queue now uses the UMA kernel
- memory allocator and limits the maximum number of segments it
- will hold, thus preventing a certain class of denial of
- service attack. Its behavior is controlled by the
- net.inet.tcp.reass hierarchy of sysctl
- variables.
-
diff --git a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml
index c25b6caa788..12a0a31ef4e 100644
--- a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml
+++ b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml
@@ -148,6 +148,13 @@
jail. More information can be found in security advisory FreeBSD-SA-04:03.
+ A potential low-bandwidth denial-of-service attack against
+ the &os; TCP stack has been prevented by limiting the number of
+ out-of-sequence TCP segments that can be held at one time. More
+ details can be found in security advisory FreeBSD-SA-04:04.
+ &merged;
+
@@ -289,13 +296,6 @@
support for the TCP-MD5 class of security associations.
&merged;
- The TCP segment reassembly queue now uses the UMA kernel
- memory allocator and limits the maximum number of segments it
- will hold, thus preventing a certain class of denial of
- service attack. Its behavior is controlled by the
- net.inet.tcp.reass hierarchy of sysctl
- variables.
-