release/doc/en_US.ISO8859-1/relnotes/article.xml

   1 <?xml version="1.0" encoding="iso-8859-1"?>
   2 <!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
   3         "../../../share/xml/freebsd50.dtd" [
   4 <!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN" "release.ent">
   5  %release;
   6 ]>
   7 <article xmlns="http://docbook.org/ns/docbook" xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0">
   8   <info><title>&os; &release.current; Release Notes</title>
   9
  10     <author><orgname>The &os; Project</orgname></author>
  11
  12     <pubdate>$FreeBSD$</pubdate>
  13
  14     <copyright>
  15       <year>2014</year>
  16       <holder role="mailto:doc@FreeBSD.org">The &os; Documentation Project</holder>
  17     </copyright>
  18
  19     <legalnotice xml:id="trademarks" role="trademarks">
  20       &tm-attrib.freebsd;
  21       &tm-attrib.ibm;
  22       &tm-attrib.ieee;
  23       &tm-attrib.intel;
  24       &tm-attrib.sparc;
  25       &tm-attrib.general;
  26     </legalnotice>
  27
  28     <abstract>
  29       <para>The release notes for &os; &release.current; contain a summary
  30         of the changes made to the &os; base system on the
  31         &release.branch; development line.
  32         This document lists applicable security advisories that were issued since
  33         the last release, as well as significant changes to the &os;
  34         kernel and userland.
  35         Some brief remarks on upgrading are also presented.</para>
  36     </abstract>
  37   </info>
  38
  39   <sect1 xml:id="intro">
  40     <title>Introduction</title>
  41
  42     <para>This document contains the release notes for &os;
  43       &release.current;.  It describes recently added, changed, or
  44       deleted features of &os;.  It also provides some notes on
  45       upgrading from previous versions of &os;.</para>
  46
  47     <para>This distribution of &os; &release.current; is a
  48       &release.type; distribution.  It can be found at <uri xlink:href="&release.url;">&release.url;</uri> or any of its mirrors.  More
  49       information on obtaining this (or other) &release.type;
  50       distributions of &os; can be found in the <link xlink:href="&url.books.handbook;/mirrors.html"><quote>Obtaining
  51       &os;</quote> appendix</link> to the <link xlink:href="&url.books.handbook;/">&os; Handbook</link>.</para>
  52
  53     <para>All users are encouraged to consult the release errata before
  54       installing &os;.  The errata document is updated with
  55       <quote>late-breaking</quote> information discovered late in the
  56       release cycle or after the release.  Typically, it contains
  57       information on known bugs, security advisories, and corrections to
  58       documentation.  An up-to-date copy of the errata for &os;
  59       &release.current; can be found on the &os; Web site.</para>
  60   </sect1>
  61
  62   <sect1 xml:id="new">
  63     <title>What's New</title>
  64
  65     <para>This section describes the most user-visible new or changed
  66       features in &os; since &release.prev;.</para>
  67
  68     <para>Typical release note items document recent security
  69       advisories issued after &release.prev;, new drivers or hardware
  70       support, new commands or options, major bug fixes, or
  71       contributed software upgrades.  They may also list changes to
  72       major ports/packages or release engineering practices.  Clearly
  73       the release notes cannot list every single change made to &os;
  74       between releases; this document focuses primarily on security
  75       advisories, user-visible changes, and major architectural
  76       improvements.</para>
  77
  78     <sect2 xml:id="security">
  79       <title>Security Advisories</title>
  80
  81       <para>Problems described in the following security advisories have
  82         been fixed.  For more information, consult the individual
  83         advisories available from
  84         <uri xlink:href="http://security.FreeBSD.org/">http://security.FreeBSD.org/</uri>.</para>
  85
  86       <informaltable frame="none" pgwide="1">
  87         <tgroup cols="3">
  88           <colspec colwidth="1*"/>
  89           <colspec colwidth="1*"/>
  90           <colspec colwidth="3*"/>
  91           <thead>
  92             <row>
  93               <entry>Advisory</entry>
  94               <entry>Date</entry>
  95               <entry>Topic</entry>
  96             </row>
  97           </thead>
  98
  99           <tbody>
 100             <row>
 101               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:01.openssl.asc">SA-12:01.openssl</link></entry>
 102               <entry>3&nbsp;May&nbsp;2012</entry>
 103               <entry><para>OpenSSL multiple vulnerabilities</para></entry>
 104             </row>
 105
 106             <row>
 107               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:02.crypt.asc">SA-12:02.crypt</link></entry>
 108               <entry>30&nbsp;May&nbsp;2012</entry>
 109               <entry><para>Incorrect <function>crypt()</function> hashing</para></entry>
 110             </row>
 111
 112             <row>
 113               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:03.bind.asc">SA-12:03.bind</link></entry>
 114               <entry>12&nbsp;June&nbsp;2012</entry>
 115               <entry><para>Incorrect handling of zero-length RDATA fields in &man.named.8;</para></entry>
 116             </row>
 117
 118             <row>
 119               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:04.sysret.asc">SA-12:04.sysret</link></entry>
 120               <entry>12&nbsp;June&nbsp;2012</entry>
 121               <entry><para>Privilege escalation when returning from kernel</para></entry>
 122             </row>
 123
 124             <row>
 125               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:05.bind.asc">SA-12:05.bind</link></entry>
 126               <entry>6&nbsp;August&nbsp;2012</entry>
 127               <entry><para>&man.named.8; DNSSEC validation Denial of Service</para></entry>
 128             </row>
 129
 130             <row>
 131               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:06.bind.asc">SA-12:06.bind</link></entry>
 132               <entry>22&nbsp;November&nbsp;2012</entry>
 133               <entry><para>Multiple Denial of Service vulnerabilities with &man.named.8;</para></entry>
 134             </row>
 135
 136             <row>
 137               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:07.hostapd.asc">SA-12:07.hostapd</link></entry>
 138               <entry>22&nbsp;November&nbsp;2012</entry>
 139               <entry><para>Insufficient message length validation for EAP-TLS messages</para></entry>
 140             </row>
 141
 142             <row>
 143               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:08.linux.asc">SA-12:08.linux</link></entry>
 144               <entry>22&nbsp;November&nbsp;2012</entry>
 145               <entry><para>Linux compatibility layer input validation error</para></entry>
 146             </row>
 147           </tbody>
 148         </tgroup>
 149       </informaltable>
 150     </sect2>
 151
 152     <sect2 xml:id="kernel">
 153       <title>Kernel Changes</title>
 154
 155       <para revision="262564">Support for the ext4 filesystem
 156         has been enabled, supporting read-only mounts.</para>
 157
 158       <para revision="262594">A kernel panic triggered by inserting
 159         a USB ethernet device on VIMAGE-enabled systems has been
 160         fixed.</para>
 161
 162       <para revision="262988">TTM, a memory manager used by video
 163         drivers, has been merged.</para>
 164
 165       <para revision="263103">Support for
 166         <literal>/sys/kernel/random/uuid</literal> has been added
 167         to &man.linprocfs.5;.</para>
 168
 169       <para revision="263128">A memory leak in the
 170         <literal>zpool_in_use()</literal> function has been
 171         fixed.</para>
 172
 173       <para revision="263391">The
 174         <literal>extensible_dataset</literal> &man.zpool.8; feature
 175         has been added.  See &man.zpool-features.7; for more
 176         information.</para>
 177
 178       <para revision="263408">A memory leak has been fixed in
 179         <literal>libzfs</literal>.</para>
 180
 181       <sect3 xml:id="boot">
 182         <title>Boot Loader Changes</title>
 183
 184         <para>&nbsp;</para>
 185
 186       </sect3>
 187
 188       <sect3 xml:id="proc">
 189         <title>Hardware Support</title>
 190
 191         <para revision="262362">The &man.urndis.4; driver has been
 192           imported from OpenBSD.</para>
 193
 194         <para revision="262968">The &man.mfi.4; driver has been
 195           updated to support MegaRAID Fury cards.</para>
 196
 197         <para revision="263170,263171">The Radeon KMS driver has been
 198           added.</para>
 199
 200         <para revision="263340">The &man.aacraid.4; driver has been
 201           updated to version 3.2.5.</para>
 202
 203         <sect4 xml:id="mm">
 204           <title>Multimedia Support</title>
 205
 206           <para>&nbsp;</para>
 207
 208         </sect4>
 209
 210         <sect4 xml:id="net-if">
 211           <title>Network Interface Support</title>
 212
 213           <para>&nbsp;</para>
 214
 215         </sect4>
 216       </sect3>
 217
 218       <sect3 xml:id="net-proto">
 219         <title>Network Protocols</title>
 220
 221         <para>&nbsp;</para>
 222
 223       </sect3>
 224
 225       <sect3 xml:id="disks">
 226         <title>Disks and Storage</title>
 227
 228         <para>&nbsp;</para>
 229
 230       </sect3>
 231
 232       <sect3 xml:id="fs">
 233         <title>File Systems</title>
 234
 235         <para revision="263410">The &man.zfs.8; filesystem has been
 236           updated to support the <literal>bookmarks</literal>
 237           feature.</para>
 238
 239       </sect3>
 240     </sect2>
 241
 242     <sect2 xml:id="userland">
 243       <title>Userland Changes</title>
 244
 245       <para revision="262706"><application>BIND</application> has
 246         been updated to version 9.9.5.</para>
 247
 248       <para revision="263031">Installation from a read-only
 249         <envar>.OBJDIR</envar> has been fixed.</para>
 250
 251       <para revision="263031">A new shared library directory,
 252         <filename class="directory">/usr/lib/private</filename>,
 253         has been added for internal-use shared libraries.</para>
 254
 255       <para revision="263031">A default
 256         <filename>libmap32.conf</filename> has been added, for 32-bit
 257         applications.</para>
 258
 259       <para revision="263032">The <literal>libucl</literal> library
 260         a JSON-compatible configuration file parsing library,has been
 261         imported.</para>
 262
 263       <para revision="263038">The &man.pkg.7; package management
 264         utility has been syncronized with <literal>head/</literal>.
 265         This implements binary package signature verification when
 266         bootstrapping the system with <command>pkg
 267           bootstrap</command>.</para>
 268
 269       <para revision="263042">The system timezone data files have
 270         been updated to version tzdata2014a.</para>
 271
 272       <para revision="263212">The NetBSD &man.make.1; utility,
 273         <command>bmake</command> has been imported for compatibility
 274         with the &os;&nbsp;Ports Collection.  It is installed as
 275         <command>bmake</command>, and the <command>make</command>
 276         remains the &os; version.</para>
 277
 278       <para revision="263286">The &man.xz.1; utility has been updated
 279         to a post-5.0.5 snapshot.</para>
 280
 281       <para revision="263326">The &man.fetch.3; library now
 282         supports <literal>Last-Modified</literal> timestamps which
 283         return UTC instead of GMT.</para>
 284
 285       <para revision="263404">Aliases for the &man.zfs.8; commands
 286         <literal>list -t snap</literal> and <literal>snap</literal>
 287         have been added to match &oracle;&nbsp;Solaris 11.</para>
 288
 289       <para revision="263406">A new flag, <literal>-p</literal>, has
 290         been added to the &man.zfs.8; <literal>list</literal> command,
 291         providing output in a parseable form.</para>
 292
 293       <para revision="263421"><application>OpenPAM</application> has
 294         been updated to Nummularia (20130907), which incorporates
 295         several bug fixes and documentation improvements.  The
 296         &man.openpam.ttyconv.3; library has been completely
 297         rewritten.</para>
 298
 299       <sect3 xml:id="periodic-scripts">
 300         <title>&man.periodic.8; Scripts</title>
 301
 302         <para>&nbsp;</para>
 303
 304       </sect3>
 305
 306       <sect3 xml:id="rc-scripts">
 307         <title>&man.rc.8; Scripts</title>
 308
 309         <para>&nbsp;</para>
 310
 311       </sect3>
 312     </sect2>
 313
 314     <sect2 xml:id="contrib">
 315       <title>Contributed Software</title>
 316
 317       <para>&nbsp;</para>
 318
 319     </sect2>
 320
 321     <sect2 xml:id="releng">
 322       <title>Release Engineering and Integration</title>
 323
 324       <para revision="262879">The <filename>release.sh</filename>
 325         script and release <filename>Makefile</filename> have been
 326         updated to use &man.pkg.7; to populate the dvd installation
 327         medium.</para>
 328
 329       <para revision="263028">The &man.services.mkdb.8; utility has
 330         been updated to support multiple byte orders.  Similar to
 331         &man.cap.mkdb.1;, the <filename>services.db</filename> will
 332         be created with proper endinanness as part of
 333         cross-architecture release builds.</para>
 334
 335     </sect2>
 336   </sect1>
 337
 338   <sect1 xml:id="upgrade">
 339     <title>Upgrading from previous releases of &os;</title>
 340
 341     <sect2>
 342       <title>Upgrading using &man.freebsd-update.8; or a source-based
 343         procedure</title>
 344
 345       <para arch="amd64,i386">Binary upgrades between RELEASE versions
 346         (and snapshots of the various security branches) are supported
 347         using the &man.freebsd-update.8; utility.  The binary upgrade
 348         procedure will update unmodified userland utilities, as well
 349         as an unmodified <filename>GENERIC</filename> kernel,
 350         distributed as a part of an official &os; release.  The
 351         &man.freebsd-update.8; utility requires that the host being
 352         upgraded have Internet connectivity.</para>
 353
 354       <para>Source-based upgrades (those based on recompiling the &os;
 355         base system from source code) from previous versions are
 356         supported using to the instructions in
 357         <filename>/usr/src/UPDATING</filename>.</para>
 358
 359       <para>For more specific information about upgrading
 360         instructions, see <uri xlink:href="http://www.FreeBSD.org/releases/9.1R/installation.html">http://www.FreeBSD.org/releases/9.1R/installation.html</uri>.</para>
 361
 362       <important>
 363         <para>Upgrading &os; should, of course, only be attempted
 364           after backing up <emphasis>all</emphasis> data and
 365           configuration files.</para>
 366       </important>
 367     </sect2>
 368
 369     <sect2>
 370       <title xml:id="upgrade-pitfalls">User-visible incompatibilities</title>
 371
 372       <para>FreeBSD 9.0 and later have several incompatibilities in
 373         system configuration which you might want to know before
 374         upgrading your system.  <emphasis>Please read this section and
 375         the <link xlink:href="http://www.freebsd.org/releases/9.0R/relnotes-detailed.html#UPGRADE">Upgrading
 376         Section in 9.0-RELEASE Release Notes</link> carefully before
 377         submitting a problem report and/or posting a question to the
 378         FreeBSD mailing lists.</emphasis></para>
 379     </sect2>
 380   </sect1>
 381 </article>