1 <?xml version="1.0" encoding="iso-8859-1"?>
2 <!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
3 "../../../share/xml/freebsd50.dtd" [
4 <!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN" "release.ent">
6 <!ENTITY % sponsor PUBLIC "-//FreeBSD//ENTITIES Sponsor Specification//EN" "sponsor.ent">
8 <!ENTITY % vendor PUBLIC "-//FreeBSD//ENTITIES Vendor Specification//EN" "vendor.ent">
11 <article xmlns="http://docbook.org/ns/docbook" xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0">
12 <info><title>&os; &release.current; Release Notes</title>
14 <author><orgname>The &os; Project</orgname></author>
16 <pubdate>$FreeBSD$</pubdate>
20 <holder role="mailto:doc@FreeBSD.org">The &os; Documentation
24 <legalnotice xml:id="trademarks" role="trademarks">
34 <para>The release notes for &os; &release.current; contain
35 a summary of the changes made to the &os; base system on the
36 &release.branch; development line. This document lists
37 applicable security advisories that were issued since the last
38 release, as well as significant changes to the &os; kernel and
39 userland. Some brief remarks on upgrading are also
44 <sect1 xml:id="intro">
45 <title>Introduction</title>
47 <para>This document contains the release notes for &os;
48 &release.current;. It describes recently added, changed, or
49 deleted features of &os;. It also provides some notes on
50 upgrading from previous versions of &os;.</para>
52 <para releasetype="current">The &release.type; distribution to which
53 these release notes apply represents the latest point along the
54 &release.branch; development branch since &release.branch; was
55 created. Information regarding pre-built, binary &release.type;
56 distributions along this branch can be found at <uri
57 xlink:href="&release.url;">&release.url;</uri>.</para>
59 <para releasetype="snapshot">The &release.type; distribution to
60 which these release notes apply represents a point along the
61 &release.branch; development branch between &release.prev; and the
62 future &release.next;. Information regarding pre-built, binary
63 &release.type; distributions along this branch can be found at
64 <uri xlink:href="&release.url;">&release.url;</uri>.</para>
66 <para releasetype="release">This distribution of &os;
67 &release.current; is a &release.type; distribution. It can be
68 found at <uri xlink:href="&release.url;">&release.url;</uri> or
69 any of its mirrors. More information on obtaining this (or other)
70 &release.type; distributions of &os; can be found in the <link
71 xlink:href="&url.books.handbook;/mirrors.html"><quote>Obtaining
72 &os;</quote> appendix</link> to the <link
73 xlink:href="&url.books.handbook;/">&os; Handbook</link>.</para>
75 <para>All users are encouraged to consult the release errata before
76 installing &os;. The errata document is updated with
77 <quote>late-breaking</quote> information discovered late in the
78 release cycle or after the release. Typically, it contains
79 information on known bugs, security advisories, and corrections to
80 documentation. An up-to-date copy of the errata for &os;
81 &release.current; can be found on the &os; Web site.</para>
85 <title>What's New</title>
87 <para>This section describes the most user-visible new or changed
88 features in &os; since &release.prev;. In general, changes
89 described here are unique to the &release.branch; branch unless
90 specifically marked as &merged; features.</para>
92 <para>Typical release note items document recent security advisories
93 issued after &release.prev;, new drivers or hardware support, new
94 commands or options, major bug fixes, or contributed software
95 upgrades. They may also list changes to major ports/packages or
96 release engineering practices. Clearly the release notes cannot
97 list every single change made to &os; between releases; this
98 document focuses primarily on security advisories, user-visible
99 changes, and major architectural improvements.</para>
101 <sect2 xml:id="security">
102 <title>Security Advisories</title>
104 <para>No advisories.</para>
108 <sect2 xml:id="kernel">
109 <title>Kernel Changes</title>
111 <para revision="260903">Support for GPS ports has been added to
114 <para revision="264601" contrib="sponsor"
115 sponsor="&darpa_afrl;">The <literal>if_nf10bmac(4)</literal>
116 device has been added, providing support for NetFPGA-10G
117 Embedded CPU Ethernet Core.</para>
120 <para>The <literal>if_nf10bmac(4)</literal> driver operates on
121 the FPGA, and is not suited for the PCI host interface.</para>
124 <para revision="265132">The &man.full.4; device has been added,
125 and the <literal>lindev(4)</literal> device has been removed.
126 Prior to this change, <literal>lindev(4)</literal> provided only
127 the <filename>/dev/full</filename> character device, returning
128 <literal>ENOSPC</literal> on write attempts. As this device is
129 not specific to &linux;, a native &os; version has been
132 <para revision="265236" contrib="sponsor"
133 sponsor="&lsi;, &spectralogic;" sponsorurl="">The &man.mpr.4;
134 device has been added, providing support for LSI Fusion-MPT
135 3 12Gb SCSI/SATA controllers.</para>
137 <para revision="265555" contrib="sponsor"
138 sponsor="&lsi;">The &man.mrsas.4; driver has been added,
139 providing support for LSI MegaRAID SAS controllers. The
140 &man.mfi.4; driver will attach to the controller, by default.
141 To enable &man.mrsas.4; add
142 <literal>hw.mfi.mrsas_enable=1</literal> to
143 <filename>/boot/loader.conf</filename>, which turns off
144 &man.mfi.4; device probing.</para>
147 <para>At this time, the &man.mfiutil.8; utility and
149 <application>MegaCLI</application> and
150 <application>StorCli</application> do not work with
151 &man.mrsas.4;.</para>
154 <para revision="265876">A kernel bug that inhibited proper
155 functionality of the <literal>dev.cpu.0.freq</literal>
156 &man.sysctl.8; on &intel; processors with Turbo
157 Boost ™ enabled has been fixed.</para>
159 <para revision="266531">The <literal>IMAGACT_BINMISC</literal>
160 kernel configuration option has been enabled by default,
161 which enables application execution through emulators, such
162 as <application>Qemu</application>.</para>
164 <para revision="266757" contrib="sponsor"
165 sponsor="&chelsio;">Support for the &man.cxgbe.4; Terminator 5
166 (T5) 10G/40G cards has been added to &man.netmap.4;.</para>
168 <para revision="268045">The <literal>VT</literal> kernel
169 configuration file has been removed, and the &man.vt.4;
170 driver is included in the <literal>GENERIC</literal> kernel.
171 To enable &man.vt.4;, enter <literal>set kern.vty=vt</literal>
172 at the &man.loader.8; prompt during boot, or add
173 <literal>kern.vty=vt</literal> to &man.loader.conf.5; and
174 reboot the system.</para>
176 <para revision="271697" arch="powerpc">Support for &man.dtrace.1;
177 stack tracing has been fixed for &os;/&arch.powerpc;, using the
178 <literal>trapexit()</literal> and
179 <literal>asttrapexit()</literal> functions instead of checking
180 within addressed kernel space.</para>
182 <para revision="271705">Hardware context support has been
183 added to the <literal>drm/i915</literal> driver, adding
184 support for <application>Mesa</application> 9.2 and
187 <para revision="273178">The &man.vt.4; driver has been updated,
188 replacing the bitmapped <literal>kern.vt.spclkeys</literal>
189 &man.sysctl.8; with individual <literal>kern.vt.kbd_*</literal>
192 <sect3 xml:id="kernel-virtualization">
193 <title>Virtualization support</title>
195 <para revision="260410">Support for the <quote>Virtual Interrupt
196 Delivery</quote> feature of &intel; VT-x is enabled if
197 supported by the CPU. This feature can be disabled by running
198 <literal>sysctl hw.vmm.vmx.use_apic_vid=0</literal>.
199 Additionally, to persist this setting across reboots, add
200 <literal>hw.vmm.vmx.use_apic_vid=0</literal> to
201 <filename>/etc/sysctl.conf</filename>.</para>
203 <para revision="260532">Support for <quote>Posted Interrupt
204 Processing</quote> is enabled if supported by the CPU. This
205 feature can be disabled by running <literal>sysctl
206 hw.vmm.vmx.use_apic_pir=0</literal>. Additionally, to
207 persist this setting across reboots, add
208 <literal>hw.vmm.vmx.use_apic_pir=0</literal> to
209 <filename>/etc/sysctl.conf</filename>.</para>
211 <para revision="260582">Unmapped IO support has been added to
212 &man.virtio_blk.4;.</para>
214 <para revision="260583">Unmapped IO support has been added to
215 &man.virtio_scsi.4;.</para>
217 <para revision="260847">The &man.virtio_random.4; driver has
218 been added to harvest entropy from the host system.</para>
220 <para revision="267536" contrib="sponsor"
221 sponsor="&citrix.rd;">Support for running a &os;/&arch.amd64;
222 <application>Xen</application> guest instance as
223 <acronym>PVH</acronym> guest has been added.
224 <acronym>PVH</acronym> mode, short for <quote>Para-Virtualized
225 Hardware</quote>, uses para-virtualized drivers for boot
226 and I/O, and uses hardware virtualization extensions for all
227 other tasks, without the need for emulation.</para>
230 <sect3 xml:id="kernel-arm">
231 <title>ARM support</title>
233 <para revision="260921">The &man.nand.4; device is enabled for
234 ARM devices by default.</para>
236 <para revision="273264" arch="armv6">An issue that could cause
237 instability when detecting <acronym>SD</acronym> cards on the
238 Raspberry Pi <acronym>SOC</acronym> has been fixed.</para>
241 <sect3 xml:id="boot">
242 <title>Boot Loader Changes</title>
247 <sect3 xml:id="proc">
248 <title>Hardware Support</title>
250 <para revision="268303">The &man.asmc.4; driver has been updated
251 to support the &apple; MacMini 3,1.</para>
253 <para revision="268351">Support for &os;/ia64 has been dropped
254 as of &os; 11.</para>
257 <title>Multimedia Support</title>
262 <sect4 xml:id="net-if">
263 <title>Network Interface Support</title>
265 <para revision="258830">Support for Broadcom chipsets
266 BCM57764, BCM57767, BCM57782, BCM57786 and BCM57787 has
267 been added to &man.bge.4;.</para>
269 <para revision="260448">Support for the &intel;
270 Centrino™ Wireless-N 135 chipset has been
273 <para revision="260552">Firmware for &intel;
274 Centrino™ Wireless-N 105 devices has been added
275 to the base system.</para>
277 <para revision="261975">The deprecated nve(4) driver has been
278 removed. Users of NVIDIA nForce MCP network adapters are
279 advised to use the &man.nfe.4; driver instead, which has been
280 the default driver for this hardware since &os; 7.0.</para>
282 <para revision="265348" contrib="sponsor"
283 sponsor="&netgate;">The &man.ath.hal.4; driver has been
284 updated to support the Atheros AR1111 chipset.</para>
286 <para revision="266770">Support for the &intel;
287 Centrino™ Wireless-N 105 chipset has been
290 <para revision="272089">A bug in &man.ipfw.4; that could
291 potentially lead to a kernel panic when using
292 &man.dummynet.4; at layer 2 has been fixed.</para>
294 <para revision="272730">The &man.alc.4; driver has been
295 updated to support AR816x and AR817x ethernet
300 <sect3 xml:id="net-proto">
301 <title>Network Protocols</title>
303 <para revision="263140">Support for the IPX network transport
304 protocol has been removed, and will not be supported in
305 &os; 11 and later releases.</para>
307 <para revision="272720" contrib="sponsor"
308 sponsor="&limelight;">Support for <acronym>PLPMTUD</acronym>
309 blackhole detection (<acronym>RFC</acronym> 4821) has been
310 added to the &man.tcp.4; stack, disabled by default. New
311 control tunables have been added:</para>
313 <informaltable frame="none" pgwide="0">
315 <colspec colwidth="1*"/>
316 <colspec colwidth="1*"/>
319 <entry>Tunable</entry>
320 <entry>Description</entry>
326 <entry><literal>net.inet.tcp.pmtud_blackhole_detection</literal></entry>
327 <entry>Enables or disables <acronym>PLPMTUD</acronym>
328 blackhole detection</entry>
332 <entry><literal>net.inet.tcp.pmtud_blackhole_mss</literal></entry>
333 <entry><acronym>MSS</acronym> to try for IPv4</entry>
337 <entry><literal>net.inet.tcp.v6pmtud_blackhole_mss</literal></entry>
338 <entry><acronym>MSS to try for IPv6</acronym></entry>
344 <para>New monitoring &man.sysctl.8;s haven been added:</para>
346 <informaltable frame="none" pgwide="0">
348 <colspec colwidth="1*"/>
349 <colspec colwidth="1*"/>
352 <entry>Tunable</entry>
353 <entry>Description</entry>
359 <entry><literal>net.inet.tcp.pmtud_blackhole_activated</literal></entry>
360 <entry>Number of times the code was activated to attempt
361 downshifting the <acronym>MSS</acronym></entry>
365 <entry><literal>net.inet.tcp.pmtud_blackhole_min_activated</literal></entry>
366 <entry>Number of times the blackhole
367 <acronym>MSS</acronym> was used in an attempt to
372 <entry><literal>net.inet.tcp.pmtud_blackhole_failed</literal></entry>
373 <entry>Number of times that the blackhole failed to
374 connect after downshifting the
375 <acronym>MSS</acronym></entry>
383 <sect3 xml:id="disks">
384 <title>Disks and Storage</title>
386 <para revision="267359">Support for the
387 <literal>disklabel64</literal> partitioning scheme has been
388 added to &man.gpart.8;.</para>
390 <para revision="276526">The <literal>asr(4)</literal> driver has
391 been removed, and is no longer supported.</para>
395 <title>File Systems</title>
397 <para revision="r270096" contrib="sponsor" sponsor="&ff;">The
398 new filesystem automount facility, &man.autofs.5;, has been
399 added. The new &man.autofs.5; facility is similar to that
400 found in other &unix;-like operating systems, such as
401 OS X™ and Solaris™. The &man.autofs.5;
402 facility uses a &sun;-compatible &man.auto.master.5;
403 configuration file, and is administered with the
404 &man.automount.8; userland utility, and the
405 &man.automountd.8; and &man.autounmountd.8; daemons.</para>
407 <sect4 xml:id="fs-zfs">
415 <sect2 xml:id="userland">
416 <title>Userland Changes</title>
418 <para revision="258838" contrib="sponsor" sponsor="&ff;, &google;"
419 sponsorurl="">The &man.casperd.8; daemon has been added,
420 which provides access to functionality that is not available in
421 the <quote>capability mode</quote> sandbox.</para>
423 <para revision="260594">When unable to load a kernel module with
424 &man.kldload.8;, a message informing to view output of
425 &man.dmesg.8; is now printed, opposed to the previous output
426 <quote>Exec format error.</quote>.</para>
428 <para revision="260910">Allow &man.pciconf.8; to identify PCI
429 devices that are attached to a driver to be identified by their
430 device name instead of just the selector. Additionally, an
431 optional device argument to the <literal>-l</literal> flag
432 to restrict the output to only listing details about a single
435 <para revision="260913">A new flag, <quote>onifconsole</quote> has
436 been added to <filename>/etc/ttys</filename>. This allows the
437 system to provide a login prompt via serial console if the
438 device is an active kernel console, otherwise it is equivalent
439 to <literal>off</literal>.</para>
441 <para revision="260926">Support for displaying VPD for PCI devices
442 via &man.pciconf.8; has been added.</para>
444 <para revision="261498">&man.ping.8; protects against malicious
445 network packets using the Capsicum framework to drop
448 <para revision="261504">&os;/&arch.i386; guests can be run under
451 <para revision="265229">The &man.ps.1; utility has been
452 updated to include the <literal>-J</literal> flag, used to
453 filter output by matching &man.jail.8; IDs and names.
454 Additionally, argument <literal>0</literal> can be used to
455 <literal>-J</literal> to only list processes running on the
458 <para revision="265249">The &man.top.1; utility has been updated
459 to filter by &man.jail.8; ID or name, in followup to the
460 &man.ps.1; change in <literal>r265229</literal>.</para>
462 <para revision="265995">The Blowfish &man.crypt.3; default format
464 <literal>$2b$</literal>.</para>
466 <para revision="266209">The &man.pmcstat.8; utility has been
467 updated to include a new flag, <literal>-l</literal>, which
468 ends event collection after the specified number of
471 <para revision="266463">The default &man.newsyslog.conf.5; now
472 includes files in the
473 <filename>/etc/newsyslog.conf.d/</filename> and
474 <filename>/usr/local/etc/newsyslog.conf.d/</filename>
475 directories by default for &man.newsyslog.8;.</para>
477 <para revision="268461">The &man.readline.3; library is now
478 statically linked in software within the base system, and the
479 shared library is no longer installed, allowing the Ports
480 Collection to use a modern version of the library.</para>
482 <para revision="270675">The &man.mailwrapper.8; utility has been
483 updated to use &man.mailer.conf.5; from the
484 <literal>LOCALBASE</literal> environment variable, which
485 defaults to <filename class="directory">/usr/local</filename>
488 <para revision="270745">The &man.ps.1; utility has been updated
489 to include a new keyword, <quote>tracer</quote>, which displays
490 the parent <acronym>PID</acronym> of a child process.</para>
492 <para revision="271482">Support for adding empty partitions has
493 been added to the &man.mkimg.1; utility.</para>
495 <para revision="272166">The &man.primes.6; utility has been
496 updated to correctly enumerate prime numbers between
497 <literal>4295098369</literal> and
498 <literal>3825123056546413050</literal>, which prior to this
499 change, it would be possible for returned values to be
500 incorrectly identified as prime numbers.</para>
502 <para revision="272198">The &man.mkimg.1; utility has been
503 updated to include three options used to print information
504 about &man.mkimg.1; itself:</para>
506 <informaltable frame="none" pgwide="0">
508 <colspec colwidth="1*"/>
509 <colspec colwidth="1*"/>
512 <entry>Option</entry>
513 <entry>Output</entry>
519 <entry><literal>--version</literal></entry>
520 <entry>The current version of the &man.mkimg.1;
525 <entry><literal>--formats</literal></entry>
526 <entry>The disk image file formats supported by
527 &man.mkimg.1;</entry>
531 <entry><literal>--schemes</literal></entry>
532 <entry>The partition schemes supported by
533 &man.mkimg.1;</entry>
539 <para revision="272273">The &man.strptime.3; library has been
540 updated to add support for <acronym>POSIX</acronym>-2001
541 features <literal>%U</literal> and <literal>%W</literal>.</para>
543 <para revision="272274">The &os; installation utility,
544 &man.bsdinstall.8;, has been updated to set the
545 <literal>canmount</literal> &man.zfs.8; property to
546 <literal>off</literal> for the
547 <filename class="directory">/var</filename> dataset, preventing
548 the contents of directories within <filename
549 class="directory">/var</filename> from conflicting when using
550 multiple boot environments, such as that provided by <filename
551 role="package">sysutils/beadm</filename>.</para>
553 <para revision="272350">The <literal>MK_ARM_EABI</literal>
554 &man.src.conf.5; option has been removed.</para>
556 <para revision="272488">Userland &man.ctf.5; support in
557 &man.dtrace.1; has been added. With this change, &man.dtrace.1;
558 is able to resolve type info for function and
559 <acronym>USDT</acronym> probe arguments, and function return
562 <para revision="272842,272848" contrib="sponsor"
563 sponsor="&ff;">The &man.dl.iterate.phdr.3; library has been
564 changed to always return the path name of the
565 <acronym>ELF</acronym> object in the
566 <literal>dlpi_name</literal> structure member.</para>
568 <sect3 xml:id="abi-compat">
569 <title><acronym>ABI</acronym> Compatibility</title>
571 <para revision="271982">The &linux; compatiblity version has
572 been updated to <literal>2.6.18</literal>. The
573 <literal>compat.linux.osrelease</literal> &man.sysctl.8; is
574 evaluated when building the <filename
575 role="package">emulators/linux-c6</filename> and related
579 <sect3 xml:id="rc-scripts">
580 <title><filename>/etc/rc.d</filename> Scripts</title>
582 <para revision="270676">The &man.rc.8; subsystem has been
583 updated to allow configuring services in <filename
584 class="directory">${LOCALBASE}/etc/rc.conf.d/</filename>.
585 If <literal>LOCALBASE</literal> is unset, it defaults to
586 <filename class="directory">/usr/local</filename>.</para>
589 <sect3 xml:id="periodic-scripts">
590 <title><filename>/etc/periodic</filename> Scripts</title>
592 <para revision="271321">The daily &man.periodic.8; script
593 <filename>110.clean-tmps</filename> has been updated to
594 avoid crossing filesystem mount boundaries when cleaning
595 files in <filename class="directory">/tmp</filename>.</para>
599 <sect2 xml:id="contrib">
600 <title>Contributed Software</title>
602 <para revision="258884" contrib="sponsor"
603 sponsor="&darpa_afrl;">&man.lldb.1; has been updated to upstream
604 snapshot version r196259.</para>
606 <para revision="259626">Timezone data files have been updated to
607 version 2013i.</para>
609 <para revision="260445">&man.byacc.1; has been updated to version
612 <para revision="261071">&man.jemalloc.3; has been updated to
613 version 3.5.0.</para>
615 <para revision="261212"><application>bmake</application> has been
616 updated to version 20140101.</para>
618 <para revision="261283"><application>libc++</application> has been
619 updated to version 3.4.</para>
621 <para revision="261320"><application>OpenSSH</application> has
622 been updated to 6.5p1.</para>
624 <para revision="261344"><application>mdocml</application> has been
625 updated to version 1.12.3.</para>
627 <para revision="261991"><application>LLVM</application> and
628 <application>Clang</application> have been updated to
631 <para revision="266527" role="merged"><application>Sendmail</application>
632 has been updated from 8.14.7 to 8.14.9.</para>
634 <para revision="267256"><application>OpenSSL</application> has
635 been updated to version 1.0.1h.</para>
637 <para revision="276577"><application>file</application> has been
638 updated to version 5.22.</para>
640 <para revision="273146"><application>OpenSSL</application> has
641 been updated to version 1.0.1j.</para>
644 <sect2 xml:id="ports">
645 <title>Ports/Packages Collection Infrastructure</title>
650 <sect2 xml:id="releng">
651 <title>Release Engineering and Integration</title>
657 <title>Documentation</title>
663 <sect1 xml:id="upgrade">
664 <title>Upgrading from previous releases of &os;</title>
666 <para arch="amd64,i386">Binary upgrades between RELEASE versions
667 (and snapshots of the various security branches) are supported
668 using the &man.freebsd-update.8; utility. The binary upgrade
669 procedure will update unmodified userland utilities, as well as
670 unmodified GENERIC kernels distributed as a part of an official
671 &os; release. The &man.freebsd-update.8; utility requires that
672 the host being upgraded have Internet connectivity.</para>
674 <para>Source-based upgrades (those based on recompiling the &os;
675 base system from source code) from previous versions are
676 supported, according to the instructions in
677 <filename>/usr/src/UPDATING</filename>.</para>
680 <para>Upgrading &os; should only be attempted after backing up
681 <emphasis>all</emphasis> data and configuration files.</para>