release/doc/en_US.ISO8859-1/relnotes/article.xml

   1 <?xml version="1.0" encoding="iso-8859-1"?>
   2 <!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
   3         "../../../share/xml/freebsd50.dtd" [
   4 <!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN" "release.ent">
   5  %release;
   6 ]>
   7 <article xmlns="http://docbook.org/ns/docbook" xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0">
   8   <info><title>&os; &release.current; Release Notes</title>
   9
  10     <author><orgname>The &os; Project</orgname></author>
  11
  12     <pubdate>$FreeBSD$</pubdate>
  13
  14     <copyright>
  15       <year>2014</year>
  16       <holder role="mailto:doc@FreeBSD.org">The &os; Documentation Project</holder>
  17     </copyright>
  18
  19     <legalnotice xml:id="trademarks" role="trademarks">
  20       &tm-attrib.freebsd;
  21       &tm-attrib.ibm;
  22       &tm-attrib.ieee;
  23       &tm-attrib.intel;
  24       &tm-attrib.sparc;
  25       &tm-attrib.general;
  26     </legalnotice>
  27
  28     <abstract>
  29       <para>The release notes for &os; &release.current; contain a summary
  30         of the changes made to the &os; base system on the
  31         &release.branch; development line.
  32         This document lists applicable security advisories that were issued since
  33         the last release, as well as significant changes to the &os;
  34         kernel and userland.
  35         Some brief remarks on upgrading are also presented.</para>
  36     </abstract>
  37   </info>
  38
  39   <sect1 xml:id="intro">
  40     <title>Introduction</title>
  41
  42     <para>This document contains the release notes for &os;
  43       &release.current;.  It describes recently added, changed, or
  44       deleted features of &os;.  It also provides some notes on
  45       upgrading from previous versions of &os;.</para>
  46
  47     <para>This distribution of &os; &release.current; is a
  48       &release.type; distribution.  It can be found at <uri xlink:href="&release.url;">&release.url;</uri> or any of its mirrors.  More
  49       information on obtaining this (or other) &release.type;
  50       distributions of &os; can be found in the <link xlink:href="&url.books.handbook;/mirrors.html"><quote>Obtaining
  51       &os;</quote> appendix</link> to the <link xlink:href="&url.books.handbook;/">&os; Handbook</link>.</para>
  52
  53     <para>All users are encouraged to consult the release errata before
  54       installing &os;.  The errata document is updated with
  55       <quote>late-breaking</quote> information discovered late in the
  56       release cycle or after the release.  Typically, it contains
  57       information on known bugs, security advisories, and corrections to
  58       documentation.  An up-to-date copy of the errata for &os;
  59       &release.current; can be found on the &os; Web site.</para>
  60   </sect1>
  61
  62   <sect1 xml:id="new">
  63     <title>What's New</title>
  64
  65     <para>This section describes the most user-visible new or changed
  66       features in &os; since &release.prev;.</para>
  67
  68     <para>Typical release note items document recent security
  69       advisories issued after &release.prev;, new drivers or hardware
  70       support, new commands or options, major bug fixes, or
  71       contributed software upgrades.  They may also list changes to
  72       major ports/packages or release engineering practices.  Clearly
  73       the release notes cannot list every single change made to &os;
  74       between releases; this document focuses primarily on security
  75       advisories, user-visible changes, and major architectural
  76       improvements.</para>
  77
  78     <sect2 xml:id="security">
  79       <title>Security Advisories</title>
  80
  81       <para>Problems described in the following security advisories have
  82         been fixed.  For more information, consult the individual
  83         advisories available from
  84         <uri xlink:href="http://security.FreeBSD.org/">http://security.FreeBSD.org/</uri>.</para>
  85
  86       <informaltable frame="none" pgwide="1">
  87         <tgroup cols="3">
  88           <colspec colwidth="1*"/>
  89           <colspec colwidth="1*"/>
  90           <colspec colwidth="3*"/>
  91           <thead>
  92             <row>
  93               <entry>Advisory</entry>
  94               <entry>Date</entry>
  95               <entry>Topic</entry>
  96             </row>
  97           </thead>
  98
  99           <tbody>
 100             <row>
 101               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:01.openssl.asc">SA-12:01.openssl</link></entry>
 102               <entry>3&nbsp;May&nbsp;2012</entry>
 103               <entry><para>OpenSSL multiple vulnerabilities</para></entry>
 104             </row>
 105
 106             <row>
 107               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:02.crypt.asc">SA-12:02.crypt</link></entry>
 108               <entry>30&nbsp;May&nbsp;2012</entry>
 109               <entry><para>Incorrect <function>crypt()</function> hashing</para></entry>
 110             </row>
 111
 112             <row>
 113               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:03.bind.asc">SA-12:03.bind</link></entry>
 114               <entry>12&nbsp;June&nbsp;2012</entry>
 115               <entry><para>Incorrect handling of zero-length RDATA fields in &man.named.8;</para></entry>
 116             </row>
 117
 118             <row>
 119               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:04.sysret.asc">SA-12:04.sysret</link></entry>
 120               <entry>12&nbsp;June&nbsp;2012</entry>
 121               <entry><para>Privilege escalation when returning from kernel</para></entry>
 122             </row>
 123
 124             <row>
 125               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:05.bind.asc">SA-12:05.bind</link></entry>
 126               <entry>6&nbsp;August&nbsp;2012</entry>
 127               <entry><para>&man.named.8; DNSSEC validation Denial of Service</para></entry>
 128             </row>
 129
 130             <row>
 131               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:06.bind.asc">SA-12:06.bind</link></entry>
 132               <entry>22&nbsp;November&nbsp;2012</entry>
 133               <entry><para>Multiple Denial of Service vulnerabilities with &man.named.8;</para></entry>
 134             </row>
 135
 136             <row>
 137               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:07.hostapd.asc">SA-12:07.hostapd</link></entry>
 138               <entry>22&nbsp;November&nbsp;2012</entry>
 139               <entry><para>Insufficient message length validation for EAP-TLS messages</para></entry>
 140             </row>
 141
 142             <row>
 143               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:08.linux.asc">SA-12:08.linux</link></entry>
 144               <entry>22&nbsp;November&nbsp;2012</entry>
 145               <entry><para>Linux compatibility layer input validation error</para></entry>
 146             </row>
 147           </tbody>
 148         </tgroup>
 149       </informaltable>
 150     </sect2>
 151
 152     <sect2 xml:id="kernel">
 153       <title>Kernel Changes</title>
 154
 155       <para revision="262175">A deadlock triggered by sending
 156         a mounted &man.zfs.8; snapshot has been fixed.</para>
 157
 158       <para revision="262231">Support for SIIG X1 PCI-e has been added
 159         to &man.ppc.4;.</para>
 160
 161       <para revision="262564">Support for the ext4 filesystem
 162         has been enabled, supporting read-only mounts.</para>
 163
 164       <para revision="262594">A kernel panic triggered by inserting
 165         a USB ethernet device on VIMAGE-enabled systems has been
 166         fixed.</para>
 167
 168       <para revision="262988">TTM, a memory manager used by video
 169         drivers, has been merged.</para>
 170
 171       <para revision="263103">Support for
 172         <literal>/sys/kernel/random/uuid</literal> has been added
 173         to &man.linprocfs.5;.</para>
 174
 175       <para revision="263128">A memory leak in the
 176         <literal>zpool_in_use()</literal> function has been
 177         fixed.</para>
 178
 179       <para revision="263391">The
 180         <literal>extensible_dataset</literal> &man.zpool.8; feature
 181         has been added.  See &man.zpool-features.7; for more
 182         information.</para>
 183
 184       <para revision="263408">A memory leak has been fixed in
 185         <literal>libzfs</literal>.</para>
 186
 187       <sect3 xml:id="boot">
 188         <title>Boot Loader Changes</title>
 189
 190         <para>&nbsp;</para>
 191
 192       </sect3>
 193
 194       <sect3 xml:id="proc">
 195         <title>Hardware Support</title>
 196
 197         <para revision="262362">The &man.urndis.4; driver has been
 198           imported from OpenBSD.</para>
 199
 200         <para revision="262968">The &man.mfi.4; driver has been
 201           updated to support MegaRAID Fury cards.</para>
 202
 203         <para revision="263170,263171">The Radeon KMS driver has been
 204           added.</para>
 205
 206         <para revision="263340">The &man.aacraid.4; driver has been
 207           updated to version 3.2.5.</para>
 208
 209         <sect4 xml:id="mm">
 210           <title>Multimedia Support</title>
 211
 212           <para>&nbsp;</para>
 213
 214         </sect4>
 215
 216         <sect4 xml:id="net-if">
 217           <title>Network Interface Support</title>
 218
 219           <para>&nbsp;</para>
 220
 221         </sect4>
 222       </sect3>
 223
 224       <sect3 xml:id="net-proto">
 225         <title>Network Protocols</title>
 226
 227         <para>&nbsp;</para>
 228
 229       </sect3>
 230
 231       <sect3 xml:id="disks">
 232         <title>Disks and Storage</title>
 233
 234         <para>&nbsp;</para>
 235
 236       </sect3>
 237
 238       <sect3 xml:id="fs">
 239         <title>File Systems</title>
 240
 241         <para revision="263410">The &man.zfs.8; filesystem has been
 242           updated to support the <literal>bookmarks</literal>
 243           feature.</para>
 244
 245       </sect3>
 246     </sect2>
 247
 248     <sect2 xml:id="userland">
 249       <title>Userland Changes</title>
 250
 251       <para revision="262158">A bug that would allow creating
 252         a &man.zfs.8; snapshot of an inconsistent dataset has been
 253         fixed.</para>
 254
 255       <para revision="262160">Receiving a &man.zfs.8; dataset with
 256         <command>zfs recv -F</command> now properly destroys any
 257         snapshots that were created since the incremental source
 258         snapshot.</para>
 259
 260       <para revision="262706"><application>BIND</application> has
 261         been updated to version 9.9.5.</para>
 262
 263       <para revision="263031">Installation from a read-only
 264         <envar>.OBJDIR</envar> has been fixed.</para>
 265
 266       <para revision="263031">A new shared library directory,
 267         <filename class="directory">/usr/lib/private</filename>,
 268         has been added for internal-use shared libraries.</para>
 269
 270       <para revision="263031">A default
 271         <filename>libmap32.conf</filename> has been added, for 32-bit
 272         applications.</para>
 273
 274       <para revision="263032">The <literal>libucl</literal> library
 275         a JSON-compatible configuration file parsing library,has been
 276         imported.</para>
 277
 278       <para revision="263038">The &man.pkg.7; package management
 279         utility has been syncronized with <literal>head/</literal>.
 280         This implements binary package signature verification when
 281         bootstrapping the system with <command>pkg
 282           bootstrap</command>.</para>
 283
 284       <para revision="263042">The system timezone data files have
 285         been updated to version tzdata2014a.</para>
 286
 287       <para revision="263212">The NetBSD &man.make.1; utility,
 288         <command>bmake</command> has been imported for compatibility
 289         with the &os;&nbsp;Ports Collection.  It is installed as
 290         <command>bmake</command>, and the <command>make</command>
 291         remains the &os; version.</para>
 292
 293       <para revision="263286">The &man.xz.1; utility has been updated
 294         to a post-5.0.5 snapshot.</para>
 295
 296       <para revision="263326">The &man.fetch.3; library now
 297         supports <literal>Last-Modified</literal> timestamps which
 298         return UTC instead of GMT.</para>
 299
 300       <para revision="263404">Aliases for the &man.zfs.8; commands
 301         <literal>list -t snap</literal> and <literal>snap</literal>
 302         have been added to match &oracle;&nbsp;Solaris 11.</para>
 303
 304       <para revision="263406">A new flag, <literal>-p</literal>, has
 305         been added to the &man.zfs.8; <literal>list</literal> command,
 306         providing output in a parseable form.</para>
 307
 308       <para revision="263421"><application>OpenPAM</application> has
 309         been updated to Nummularia (20130907), which incorporates
 310         several bug fixes and documentation improvements.  The
 311         &man.openpam.ttyconv.3; library has been completely
 312         rewritten.</para>
 313
 314       <sect3 xml:id="periodic-scripts">
 315         <title>&man.periodic.8; Scripts</title>
 316
 317         <para>&nbsp;</para>
 318
 319       </sect3>
 320
 321       <sect3 xml:id="rc-scripts">
 322         <title>&man.rc.8; Scripts</title>
 323
 324         <para>&nbsp;</para>
 325
 326       </sect3>
 327     </sect2>
 328
 329     <sect2 xml:id="contrib">
 330       <title>Contributed Software</title>
 331
 332       <para>&nbsp;</para>
 333
 334     </sect2>
 335
 336     <sect2 xml:id="releng">
 337       <title>Release Engineering and Integration</title>
 338
 339       <para revision="262879">The <filename>release.sh</filename>
 340         script and release <filename>Makefile</filename> have been
 341         updated to use &man.pkg.7; to populate the dvd installation
 342         medium.</para>
 343
 344       <para revision="263028">The &man.services.mkdb.8; utility has
 345         been updated to support multiple byte orders.  Similar to
 346         &man.cap.mkdb.1;, the <filename>services.db</filename> will
 347         be created with proper endinanness as part of
 348         cross-architecture release builds.</para>
 349
 350     </sect2>
 351   </sect1>
 352
 353   <sect1 xml:id="upgrade">
 354     <title>Upgrading from previous releases of &os;</title>
 355
 356     <sect2>
 357       <title>Upgrading using &man.freebsd-update.8; or a source-based
 358         procedure</title>
 359
 360       <para arch="amd64,i386">Binary upgrades between RELEASE versions
 361         (and snapshots of the various security branches) are supported
 362         using the &man.freebsd-update.8; utility.  The binary upgrade
 363         procedure will update unmodified userland utilities, as well
 364         as an unmodified <filename>GENERIC</filename> kernel,
 365         distributed as a part of an official &os; release.  The
 366         &man.freebsd-update.8; utility requires that the host being
 367         upgraded have Internet connectivity.</para>
 368
 369       <para>Source-based upgrades (those based on recompiling the &os;
 370         base system from source code) from previous versions are
 371         supported using to the instructions in
 372         <filename>/usr/src/UPDATING</filename>.</para>
 373
 374       <para>For more specific information about upgrading
 375         instructions, see <uri xlink:href="http://www.FreeBSD.org/releases/9.1R/installation.html">http://www.FreeBSD.org/releases/9.1R/installation.html</uri>.</para>
 376
 377       <important>
 378         <para>Upgrading &os; should, of course, only be attempted
 379           after backing up <emphasis>all</emphasis> data and
 380           configuration files.</para>
 381       </important>
 382     </sect2>
 383
 384     <sect2>
 385       <title xml:id="upgrade-pitfalls">User-visible incompatibilities</title>
 386
 387       <para>FreeBSD 9.0 and later have several incompatibilities in
 388         system configuration which you might want to know before
 389         upgrading your system.  <emphasis>Please read this section and
 390         the <link xlink:href="http://www.freebsd.org/releases/9.0R/relnotes-detailed.html#UPGRADE">Upgrading
 391         Section in 9.0-RELEASE Release Notes</link> carefully before
 392         submitting a problem report and/or posting a question to the
 393         FreeBSD mailing lists.</emphasis></para>
 394     </sect2>
 395   </sect1>
 396 </article>