From 08deb43b6c2d09c4cab159fe7342ba11ee3b8423 Mon Sep 17 00:00:00 2001
From: Daniel Micay <daniel.micay@grapheneos.org>
Date: Sun, 29 Sep 2024 16:19:13 -0400
Subject: [PATCH] multicast leak blocking with compatibility improvements

---
 static/releases.html | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/static/releases.html b/static/releases.html
index 22631ecd..10c69215 100644
--- a/static/releases.html
+++ b/static/releases.html
@@ -880,6 +880,8 @@
                     <p>Changes since the 2024091900 release:</p>
 
                     <ul>
+                        <li>extend standard Android eBPF filter to prevent apps sending multicast packets outside of the VPN tunnel either directly or separately via kernel-generated multicast traffic (IGMP, MLD) when leak blocking is enabled (2nd generation implementation with improved app compatibility)</li>
+                        <li>add netfilter-based multicast firewall only permitting sending multicast packets to permitted tunnel interfaces for the process to prevent apps sending multicast packets through a VPN tunnel for another profile (2nd generation implementation with improved IPv6 and app compatibility)</li>
                         <li>Sandboxed Google Play compatibility layer: add stub for Bluetooth AdvertisingSetParameters.setOwnAddressType() API needed for receiving files through Quick Share</li>
                         <li>Sandboxed Google Play compatibility layer: ignore GattServer in BTLeAdvertiser.startAdvertisingSet() needed for receiving files through Quick Share</li>
                         <li>Auditor: add battery optimization exception to help stick with the remote verification schedule despite users rarely ever interacting with the app which results in being placed into semi-restricted standby buckets</li>