]> CyberLeo.Net >> Repos - FreeBSD/stable/9.git/blob - release/doc/en_US.ISO8859-1/relnotes/article.xml
Document the following security advisories:
[FreeBSD/stable/9.git] / release / doc / en_US.ISO8859-1 / relnotes / article.xml
1 <?xml version="1.0" encoding="iso-8859-1"?>
2 <!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
3         "../../../share/xml/freebsd50.dtd" [
4 <!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN" "release.ent">
5         %release;
6 ]>
7 <article xmlns="http://docbook.org/ns/docbook" xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0">
8   <info>
9     <title>&os; &release.current; Release Notes</title>
10
11     <author><orgname>The &os; Project</orgname></author>
12
13     <pubdate>$FreeBSD$</pubdate>
14
15     <copyright>
16       <year>2014</year>
17       <holder role="mailto:doc@FreeBSD.org">The &os; Documentation
18         Project</holder>
19     </copyright>
20
21     <legalnotice xml:id="trademarks" role="trademarks">
22       &tm-attrib.freebsd;
23       &tm-attrib.ibm;
24       &tm-attrib.ieee;
25       &tm-attrib.intel;
26       &tm-attrib.sparc;
27       &tm-attrib.general;
28     </legalnotice>
29
30     <abstract>
31       <para>The release notes for &os; &release.current; contain
32         a summary of the changes made to the &os; base system on the
33         &release.branch; development line.  This document lists
34         applicable security advisories that were issued since the last
35         release, as well as significant changes to the &os; kernel and
36         userland.  Some brief remarks on upgrading are also
37         presented.</para>
38     </abstract>
39   </info>
40
41   <sect1 xml:id="intro">
42     <title>Introduction</title>
43
44     <para>This document contains the release notes for &os;
45       &release.current;.  It describes recently added, changed, or
46       deleted features of &os;.  It also provides some notes on
47       upgrading from previous versions of &os;.</para>
48
49     <para>This distribution of &os; &release.current; is
50       a &release.type; distribution.  It can be found at <uri
51         xlink:href="&release.url;">&release.url;</uri> or any of its
52       mirrors.  More information on obtaining this (or other)
53       &release.type; distributions of &os; can be found in the <link
54         xlink:href="&url.books.handbook;/mirrors.html"><quote>Obtaining
55           &os;</quote> appendix</link> to the <link
56         xlink:href="&url.books.handbook;/">&os;
57         Handbook</link>.</para>
58
59     <para>All users are encouraged to consult the release errata
60       before installing &os;.  The errata document is updated with
61       <quote>late-breaking</quote> information discovered late in the
62       release cycle or after the release.  Typically, it contains
63       information on known bugs, security advisories, and corrections
64       to documentation.  An up-to-date copy of the errata for &os;
65       &release.current; can be found on the &os; Web site.</para>
66   </sect1>
67
68   <sect1 xml:id="new">
69     <title>What's New</title>
70
71     <para>This section describes the most user-visible new or changed
72       features in &os; since &release.prev;.</para>
73
74     <para>Typical release note items document recent security
75       advisories issued after &release.prev;, new drivers or hardware
76       support, new commands or options, major bug fixes, or
77       contributed software upgrades.  They may also list changes to
78       major ports/packages or release engineering practices.  Clearly
79       the release notes cannot list every single change made to &os;
80       between releases; this document focuses primarily on security
81       advisories, user-visible changes, and major architectural
82       improvements.</para>
83
84     <sect2 xml:id="security">
85       <title>Security Advisories</title>
86
87       <para>Problems described in the following security advisories
88         have been fixed.  For more information, consult the individual
89         advisories available from <uri
90           xlink:href="http://security.FreeBSD.org/">http://security.FreeBSD.org/</uri>.</para>
91
92       <informaltable frame="none" pgwide="1">
93         <tgroup cols="3">
94           <colspec colwidth="1*"/>
95           <colspec colwidth="1*"/>
96           <colspec colwidth="3*"/>
97           <thead>
98             <row>
99               <entry>Advisory</entry>
100               <entry>Date</entry>
101               <entry>Topic</entry>
102             </row>
103           </thead>
104
105           <tbody>
106             <row>
107               <entry><link
108                   xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:01.bsnmpd.asc">FreeBSD-SA-14:01.bsnmpd</link></entry>
109               <entry>1&nbsp;January&nbsp;2014</entry>
110               <entry><para>Fix &man.bsnmpd.1; remote denial of service
111                   vulnerability</para></entry>
112             </row>
113
114             <row>
115               <entry><link
116                   xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:02.ntpd.asc">FreeBSD-SA-14:02.ntpd</link></entry>
117               <entry>1&nbsp;January&nbsp;2014</entry>
118               <entry><para>Disable <quote>monitor</quote> feature in
119                   &man.ntpd.8; by default</para></entry>
120             </row>
121
122             <row>
123               <entry><link
124                   xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:04.bind.asc">FreeBSD-SA-14:04.bind</link></entry>
125               <entry>1&nbsp;January&nbsp;2014</entry>
126               <entry><para>Remote denial of service
127                   vulnerability</para></entry>
128             </row>
129
130             <row>
131               <entry><link
132                   xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:05.nfsserver.asc">FreeBSD-SA-14:05.nfsserver</link></entry>
133               <entry>8&nbsp;April&nbsp;2014</entry>
134               <entry><para>Deadlock in the NFS server</para></entry>
135             </row>
136
137             <row>
138               <entry><link
139                   xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:06.openssl.asc">FreeBSD-SA-14:06.openssl</link></entry>
140               <entry>8&nbsp;April&nbsp;2014</entry>
141               <entry><para>ECDSA side channel leak</para></entry>
142             </row>
143
144             <row>
145               <entry><link
146                   xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:08.tcp.asc">FreeBSD-SA-14:08.tcp</link></entry>
147               <entry>30&nbsp;April&nbsp;2014</entry>
148               <entry><para>TCP reassembly vulnerability</para></entry>
149             </row>
150
151             <row>
152               <entry><link
153                   xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:11.sendmail.asc">FreeBSD-SA-14:11.sendmail</link></entry>
154               <entry>26&nbsp;May&nbsp;2014</entry>
155               <entry><para><application>Sendmail</application>
156                   improper close-on-exec flag handling</para></entry>
157             </row>
158
159             <row>
160               <entry><link
161                   xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:12.ktrace.asc">FreeBSD-SA-14:12.ktrace</link></entry>
162               <entry>3&nbsp;June&nbsp;2014</entry>
163               <entry><para>&man.ktrace.1; kernel memory
164                   disclosure</para></entry>
165             </row>
166
167             <row>
168               <entry><link
169                   xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:13.pam.asc">FreeBSD-SA-14:13.pam</link></entry>
170               <entry>3&nbsp;June&nbsp;2014</entry>
171               <entry><para>Incorrect error handling in PAM policy
172                   parser</para></entry>
173             </row>
174
175             <row>
176               <entry><link
177                   xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:14.openssl.asc">FreeBSD-SA-14:14.openssl</link></entry>
178               <entry>5&nbsp;June&nbsp;2014</entry>
179               <entry><para>Incorrect error handling in PAM policy
180                   parser</para></entry>
181             </row>
182           </tbody>
183         </tgroup>
184       </informaltable>
185     </sect2>
186
187     <sect2 xml:id="kernel">
188       <title>Kernel Changes</title>
189
190       <para revision="256033">The &man.arcmsr.4; driver has been
191         updated to version 1.20.00.28.</para>
192
193       <para revision="256437">The &man.isci.4; driver is now loadable
194         via &man.kldload.8;.</para>
195
196       <para revision="256759">System-level &man.sysctl.8; values are
197         now exposed to the system for the &man.ixgbe.4; device.</para>
198
199       <para revision="256924">The &man.mfi.4; driver has been updated
200         to support MegaRAID Invader controllers.</para>
201
202       <para revision="257119">A kernel panic triggered in
203         <literal>zfs_root()</literal> after a failed rollback has
204         been fixed.</para>
205
206       <para revision="257125">A new &man.sysctl.8;,
207         <literal>debug.devfs_iosize_max_clamp</literal> has been added
208         which enables and disables <literal>SSIZE_MAX</literal>-sized
209         I/O requests on &man.devfs.5; files.</para>
210
211       <para revision="257126">A new &man.sysctl.8;,
212         <literal>kern.disallow_high_osrel</literal>, has been added
213         which disables executing the images compiled on a userland
214         with a higher major version number than the major version
215         number of the running kernel.</para>
216
217       <para revision="257253">A kernel panic triggered by unmounting
218         a busy &man.zfs.8; filesystem has been fixed.</para>
219
220       <para revision="257373">A deadlock triggered by powering off
221         a USB device has been fixed.</para>
222
223       <para revision="258214">The &man.ata.4; driver has been updated
224         to support Intel Lynx Point PCH SMBus devices.</para>
225
226       <para revision="258215">The &man.ata.4; driver has been updated
227         to support Coleto Creek devices.</para>
228
229       <para revision="258217">The &man.ahci.4; driver has been updated
230         to support the PCI-express solid state drive in the
231         &apple;&nbsp;MacBook Air (model A1465).</para>
232
233       <para revision="258635">The &man.sysctl.8;
234         <literal>vfs.zfs.arc_meta_limit</literal> can now be changed
235         at runtime.</para>
236
237       <para revision="258870">The &man.mmap.2; system call has been
238         updated to more optimally use superpages and provide support
239         for tweaking the alignment of virtual mappings.</para>
240
241       <para revision="258962">A workaround has been implemented
242         in the &man.bge.4; driver for hung transmission on BCM5719
243         and BCM5720 chipsets.</para>
244
245       <para revision="259002">A kernel panic when listing sysctls
246         on a system with <literal>INVARIANTS</literal> enabled has
247         been fixed.</para>
248
249       <para revision="259466">A new &man.sysctl.8;,
250         <literal>kern.supported_archs</literal> has been added,
251         which will list the <envar>MACHINE_ARCH</envar> values
252         whose binaries can be run on the system.</para>
253
254       <para revision="259519">Several problems that could trigger
255         kernel panic on &man.kldload.8; and &man.kldunload.8; have
256         been fixed.</para>
257
258       <para revision="260082">A kernel panic triggered by some
259         multi-threaded applications has been fixed.</para>
260
261       <para revision="260134">The &man.runfw.4; firmware has been
262         renamed from <literal>runfw</literal> to
263         <literal>run.fw</literal> for consistency with other firmware
264         files.</para>
265
266       <para revision="260433">A new &man.sysctl.8;,
267         <literal>kern.panic_reboot_wait_time</literal>, has been
268         added.  This allows tuning the amount of time the system
269         will wait before rebooting after &man.panic.9;.  The
270         <literal>kern.panic_reboot_wait_time</literal> value defaults
271         to the kernel configuration option,
272         <literal>PANIC_REBOOT_WAIT_TIME</literal>.</para>
273
274       <para revision="260644">Hardware Random Number Generators have
275         been disabled by default.</para>
276
277       <para revision="261483">Support for GPS ports has been added
278         to the &man.uhso.4; driver.</para>
279
280       <para revision="262116">A memory leak of compressed buffers
281         has been fixed in
282         <literal>l2arc_write_done()</literal>.</para>
283
284       <para revision="262153">The &man.netmap.4; framework has been
285         updated to match the version in <literal>head/</literal>,
286         which includes netmap pipes, kqueue support, and enhanced
287         VALE switch port.</para>
288
289       <para revision="262175">A deadlock triggered by sending
290         a mounted &man.zfs.8; snapshot has been fixed.</para>
291
292       <para revision="262231">Support for SIIG X1 PCI-e has been added
293         to &man.ppc.4;.</para>
294
295       <para revision="262564">Support for the ext4 filesystem
296         has been enabled, supporting read-only mounts.</para>
297
298       <para revision="262594">A kernel panic triggered by inserting
299         a USB ethernet device on VIMAGE-enabled systems has been
300         fixed.</para>
301
302       <para revision="262988">TTM, a memory manager used by video
303         drivers, has been merged.</para>
304
305       <para revision="263103">Support for
306         <literal>/sys/kernel/random/uuid</literal> has been added
307         to &man.linprocfs.5;.</para>
308
309       <para revision="263128">A memory leak in the
310         <literal>zpool_in_use()</literal> function has been
311         fixed.</para>
312
313       <para revision="263391">The
314         <literal>extensible_dataset</literal> &man.zpool.8; feature
315         has been added.  See &man.zpool-features.7; for more
316         information.</para>
317
318       <para revision="263408">A memory leak has been fixed in
319         <literal>libzfs</literal>.</para>
320
321       <para revision="263817,263818">The <literal>vt</literal> driver
322         has been merged from <literal>head/</literal>.</para>
323
324       <para revision="265729">The &man.mpr.4; device has been added,
325         providing support for LSI Fusion-MPT 3 12Gb SCSI/SATA
326         controllers.</para>
327
328       <para revision="266167">A kernel bug that inhibited proper
329         functionality of the <literal>dev.cpu.0.freq</literal>
330         &man.sysctl.8; on &intel; processors with Turbo
331         Boost&nbsp;&trade; enabled has been fixed.</para>
332
333       <para revision="266269">Support for &man.xen.4;
334         hardware-assisted virtualization, <literal>XENHVM</literal>,
335         is now available as a loadable module,
336         <literal>xenhvm.ko</literal>.</para>
337
338       <sect3 xml:id="boot">
339         <title>Boot Loader Changes</title>
340
341         <para>&nbsp;</para>
342
343       </sect3>
344
345       <sect3 xml:id="proc">
346         <title>Hardware Support</title>
347
348         <para revision="261510">Trackpad support for
349           &apple;&nbsp;MacBook products has been added.</para>
350
351         <para revision="261973">The &man.nve.4; driver has been
352           deprecated, and the &man.nfe.4; driver should be used
353           instead.</para>
354
355         <para revision="262968">The &man.mfi.4; driver has been
356           updated to support MegaRAID Fury cards.</para>
357
358         <para revision="263170,263171">The Radeon KMS driver has been
359           added.</para>
360
361         <para revision="263340">The &man.aacraid.4; driver has been
362           updated to version 3.2.5.</para>
363
364         <sect4 xml:id="mm">
365           <title>Multimedia Support</title>
366
367           <para>&nbsp;</para>
368
369         </sect4>
370
371         <sect4 xml:id="net-if">
372           <title>Network Interface Support</title>
373
374           <para revision="257611">The &man.re.4; driver has been
375             updated to add preliminary support for the RTL8106E
376             chipset.</para>
377
378           <para revision="257614,257616">The &man.re.4; driver has
379             been updated to support the RTL8168G, RTL8168GU and
380             RTL8411B chipsets.</para>
381
382           <para revision="257618">The &man.re.4; driver has been
383             updated to add preliminary support for the RTL8168EP
384             chipset.</para>
385
386           <para revision="258586">The &man.oce.4; driver has been
387             updated to version 10.0.664.0.</para>
388
389           <para revision="258898">The &man.qlxgbe.4; driver has been
390             imported from <literal>head/</literal>.</para>
391
392           <para revision="258936">The &man.qlxge.4; driver has been
393             imported from <literal>head/</literal>.</para>
394
395           <para revision="258965">The &man.bge.4; driver has been
396             updated to support the BCM5725 chipset.</para>
397
398           <para revision="258967">The &man.bge.4; driver has been
399             updated to support the BCM57764, BCM57767, BCM57782,
400             BCM57786 and BCM57787 chipsets.</para>
401
402           <para revision="259457">The &man.run.4; driver has been
403             updated to support MediaTek/Ralink chipsets RT5370 and
404             RT5372.</para>
405
406           <para revision="259460">The &man.usb.4; wireless radiotap
407             headers have been realigned, allowing wireless adapters
408             to work on &arch.arm;, &arch.mips;, and other similar
409             platforms where alignment is important.</para>
410
411           <para revision="260119">The &man.run.4; firmware has been
412             updated to version 0.33.</para>
413
414           <para revision="260252">The &man.bxe.4; driver has been
415             merged from <literal>head/</literal>, providing support
416             for Broadcom NetXtreme II 10Gb PCIe adapters.</para>
417
418           <para revision="261865">The &man.run.4; driver has been
419             updated to include support for the MediaTek/Ralink RT3593
420             chipset.</para>
421
422           <para revision="261933">The &man.run.4; driver has been
423             updated to include support for the DLINK DWA-127 wireless
424             adapter.</para>
425
426           <para revision="262153">The &man.axge.4; driver has been
427             added.</para>
428
429           <para revision="262362">The &man.urndis.4; driver has been
430             imported from OpenBSD.</para>
431
432           <para revision="263582">The &man.bxe.4; driver has been
433             updated to version 1.78.78.</para>
434
435         </sect4>
436       </sect3>
437
438       <sect3 xml:id="net-proto">
439         <title>Network Protocols</title>
440
441         <para>&nbsp;</para>
442
443       </sect3>
444
445       <sect3 xml:id="disks">
446         <title>Disks and Storage</title>
447
448         <para>&nbsp;</para>
449
450       </sect3>
451
452       <sect3 xml:id="fs">
453         <title>File Systems</title>
454
455         <para revision="263410">The &man.zfs.8; filesystem has been
456           updated to support the <literal>bookmarks</literal>
457           feature.</para>
458
459       </sect3>
460     </sect2>
461
462     <sect2 xml:id="userland">
463       <title>Userland Changes</title>
464
465       <para revision="256054">A new flag <literal>-c</literal>, has
466         been added to &man.pgrep.1; and &man.pkill.1;, which restricts
467         the process lookup to the specified login class.</para>
468
469       <para revision="257496">The &man.ddb.8; utility has been updated
470         to add <command>show ioapic</command> and <command>show all
471           ioapics</command>.</para>
472
473       <para revision="258183">Setting <literal>nmbcluster</literal>
474         values to their current value will now be ignored, instead of
475         failing with an error.</para>
476
477       <para revision="258763">The <filename
478           class="directory">/var/cache</filename> directory is now
479         created with mode <literal>0755</literal> instead of mode
480         <literal>0750</literal>, since this directory is used by
481         many third-party applications, which makes dropping group
482         privileges impossible.</para>
483
484       <para revision="258818">The &man.uname.1; utility has been
485         updated to include the <literal>-U</literal> and
486         <literal>-K</literal> flags, which print the
487         <envar>__FreeBSD_version</envar> for the running userland
488         and kernel, respectively.</para>
489
490       <para revision="258844">The &man.fetch.3; library has been
491         updated to support SNI (Server Name Identification), allowing
492         to use virtual hosts on HTTPS.</para>
493
494       <para revision="259243">A segmentation fault and internal
495         compiler error bug in &man.gcc.1; triggered by throwing
496         a warning before parsing any tokens has been fixed.</para>
497
498       <para revision="259269,259406">Several updates to &man.gcc.1;
499         have been imported from Google.</para>
500
501       <para revision="259448">A byte-order bug in the Heimdal
502         <literal>gss_pseudo_random()</literal> function which would
503         prevent interoperability with other
504         <application>Kerberos</application> implementations has been
505         fixed.  In particular, this would prevent interoperability
506         with the MIT implementation.</para>
507
508       <para revision="260007">The &man.hastctl.8; utility has been
509         updated to output the current queue sizes.</para>
510
511       <para revision="260197">The &man.ps.1; utility will no longer
512         truncate the <literal>command</literal> output column.</para>
513
514       <para revision="260208">The &man.protect.1; command has been
515         added, which allows exempting processes from being killed
516         when swap is exhausted.</para>
517
518       <para revision="260507">The &man.gmirror.8; utility now prevents
519         deactivating the last component of a mirror.</para>
520
521       <para revision="260507">A new &man.gmirror.8; command,
522         <command>gmirror destroy</command>, has been added, which will
523         destroy the &man.geom.8; and erase the &man.gmirror.8;
524         metadata.</para>
525
526       <para revision="260650">The &man.etcupdate.8; utility, a tool
527         for managing updates to files in <filename
528           class="directory">/etc</filename>, has been merged from
529         <literal>head/</literal>.</para>
530
531       <para revision="260651">The &man.find.1; utility has been
532         updated to fix incorrect behavior with the
533         <literal>-lname</literal> and <literal>-ilname</literal>
534         flags.</para>
535
536       <para revision="260868,260869">The
537         <literal>hw.uart.console</literal> is now always updated when
538         the comconsole setup changes.</para>
539
540       <para revision="260909">The &man.kldload.8; utility has been
541         updated to display a message directing to &man.dmesg.8;,
542         instead of the cryptic message <quote>Exec format
543           error</quote>.</para>
544
545       <para revision="261674">A bug that could trigger an infinite
546         loop in KDE and X has been fixed.</para>
547
548       <para revision="262076">The &man.newsyslog.8; utility has been
549         changed to use the size of the file, instead of the blocks the
550         file takes on the disk to match the behavior documented in
551         &man.newsyslog.conf.5;.</para>
552
553       <para revision="262105">A bug in &man.zdb.8; which would cause
554         numeric parameters to a flag as being treated as additional
555         flags has been fixed.</para>
556
557       <para revision="262124">The default number of &man.nfsd.8;
558         threads has been increased from <literal>4</literal> to
559         <literal>(8 * N)</literal>, where <literal>N</literal> is
560         the number of CPUs as reported by
561         <command>sysctl -n hw.ncpu</command>.</para>
562
563       <para revision="262134">The &man.pciconf.8; utility now has
564         a <literal>-V</literal> flag, which lists information such
565         as serial numbers for each device.</para>
566
567       <para revision="262158">A bug that would allow creating
568         a &man.zfs.8; snapshot of an inconsistent dataset has been
569         fixed.</para>
570
571       <para revision="262160">Receiving a &man.zfs.8; dataset with
572         <command>zfs recv -F</command> now properly destroys any
573         snapshots that were created since the incremental source
574         snapshot.</para>
575
576       <para revision="263031">Installation from a read-only
577         <envar>.OBJDIR</envar> has been fixed.</para>
578
579       <para revision="263031">A new shared library directory,
580         <filename class="directory">/usr/lib/private</filename>,
581         has been added for internal-use shared libraries.</para>
582
583       <para revision="263031">A default
584         <filename>libmap32.conf</filename> has been added, for 32-bit
585         applications.</para>
586
587       <para revision="263032">The <literal>libucl</literal> library,
588         a JSON-compatible configuration file parsing library, has been
589         imported.</para>
590
591       <para revision="263038">The &man.pkg.7; package management
592         utility has been syncronized with <literal>head/</literal>.
593         This implements binary package signature verification when
594         bootstrapping the system with <command>pkg
595           bootstrap</command>.</para>
596
597       <para revision="263042">The system timezone data files have
598         been updated to version tzdata2014a.</para>
599
600       <para revision="263212">The NetBSD &man.make.1; utility,
601         <command>bmake</command> has been imported for compatibility
602         with the &os;&nbsp;Ports Collection.  It is installed as
603         <command>bmake</command>, and the <command>make</command>
604         remains the &os; version.</para>
605
606       <para revision="263326">The &man.fetch.3; library now
607         supports <literal>Last-Modified</literal> timestamps which
608         return UTC instead of GMT.</para>
609
610       <para revision="263404">Aliases for the &man.zfs.8; commands
611         <literal>list -t snap</literal> and <literal>snap</literal>
612         have been added to match &oracle;&nbsp;Solaris 11.</para>
613
614       <para revision="263406">A new flag, <literal>-p</literal>, has
615         been added to the &man.zfs.8; <literal>list</literal> command,
616         providing output in a parseable form.</para>
617
618       <para revision="263421"><application>OpenPAM</application> has
619         been updated to Nummularia (20130907), which incorporates
620         several bug fixes and documentation improvements.  The
621         &man.openpam.ttyconv.3; library has been completely
622         rewritten.</para>
623
624       <para revision="264423">The &man.sh.1; command interpreter has
625         been updated to expand assignments after
626         <literal>export</literal>, <literal>local</literal>, and
627         <literal>readonly</literal> differently.  As result of this
628         change, variable assignment such as <literal>local
629           v=&dollar;1</literal> will assign the first positional
630         parameter to <literal>v</literal>, even if
631         <literal>&dollar;1</literal> contains spaces, and
632         <literal>local w=<replaceable>~/myfile</replaceable></literal>
633         will expand the tilde (<literal>~</literal>).</para>
634
635       <para revision="264699">The &man.find.1; utility has been
636         updated to implement <literal>-ignore_readdir_race</literal>.
637         Prior to this change, <literal>-ignore_readdir_race</literal>
638         existed as an option for GNU &man.find.1; compatibility, and
639         was ignored if specified.  A counter primary,
640         <literal>-noignore_readdir_race</literal> now also exists, and
641         is the default behavior.</para>
642
643       <para revision="266286">The &man.ps.1; utility has been updated
644         to include the <literal>-J</literal> flag, used to filter
645         output by matching &man.jail.8; IDs and names.  Additionally,
646         argument <literal>0</literal> can be used to
647         <literal>-J</literal> to only list processes running on the
648         host system.</para>
649
650       <para revision="266287">The &man.top.1; utility has been updated
651         to filter by &man.jail.8; ID or name, in followup to the
652         &man.ps.1; change in <literal>r265229</literal>.</para>
653
654       <para revision="266818">The Blowfish &man.crypt.3; default
655         format has been changed to
656         <literal>&dollar;2b&dollar;</literal>.</para>
657
658       <para revision="267114">The default &man.newsyslog.conf.5; now
659         includes files in the
660         <filename>/etc/newsyslog.conf.d/</filename> and
661         <filename>/usr/local/etc/newsyslog.conf.d/</filename>
662         directories by default for &man.newsyslog.8;.</para>
663
664       <sect3 xml:id="periodic-scripts">
665         <title>&man.periodic.8; Scripts</title>
666
667         <para>&nbsp;</para>
668
669       </sect3>
670
671       <sect3 xml:id="rc-scripts">
672         <title>&man.rc.8; Scripts</title>
673
674         <para revision="256917">Support for <quote>first boot</quote>
675           scripts has been added to &man.rc.8;.  See &man.rc.8; and
676           &man.rc.conf.5; for implementation details.</para>
677
678         <para revision="260432">The &man.rc.8; system will now
679           re-source &man.rc.conf.5; on receipt of
680           <literal>SIGALRM</literal>.</para>
681
682       </sect3>
683     </sect2>
684
685     <sect2 xml:id="contrib">
686       <title>Contributed Software</title>
687
688       <para revision="255934">The &man.readline.3; library has been
689         updated to version 1.104.</para>
690
691       <para revision="266711"><application>Sendmail</application> has
692         been updated to version 8.14.9.</para>
693
694       <para revision="262706"><application>BIND</application> has
695         been updated to version 9.9.5.</para>
696
697       <para revision="263286">The &man.xz.1; utility has been updated
698         to a post-5.0.5 snapshot.</para>
699
700       <para revision="263970"><application>OpenSSH</application> has
701         been updated to version 6.6p1.</para>
702
703     </sect2>
704
705     <sect2 xml:id="releng">
706       <title>Release Engineering and Integration</title>
707
708       <para revision="260891">As part of the release build, the
709         &man.etcupdate.8; utility will bootstrap the system, allowing
710         &man.etcupdate.8; to work after the first upgrade of a
711         system.</para>
712
713       <para revision="262879">The <filename>release.sh</filename>
714         script and release <filename>Makefile</filename> have been
715         updated to use &man.pkg.7; to populate the dvd installation
716         medium.</para>
717
718       <para revision="263028">The &man.services.mkdb.8; utility has
719         been updated to support multiple byte orders.  Similar to
720         &man.cap.mkdb.1;, the <filename>services.db</filename> will
721         be created with proper endinanness as part of
722         cross-architecture release builds.</para>
723
724     </sect2>
725   </sect1>
726
727   <sect1 xml:id="upgrade">
728     <title>Upgrading from Previous Releases of &os;</title>
729
730     <sect2>
731       <title>Upgrading Using &man.freebsd-update.8; or a Source-Based
732         Procedure</title>
733
734       <para arch="amd64,i386">Binary upgrades between RELEASE versions
735         (and snapshots of the various security branches) are supported
736         using the &man.freebsd-update.8; utility.  The binary upgrade
737         procedure will update unmodified userland utilities, as well
738         as an unmodified <filename>GENERIC</filename> kernel,
739         distributed as a part of an official &os; release.  The
740         &man.freebsd-update.8; utility requires that the host being
741         upgraded have Internet connectivity.</para>
742
743       <para>Source-based upgrades (those based on recompiling the &os;
744         base system from source code) from previous versions are
745         supported using to the instructions in
746         <filename>/usr/src/UPDATING</filename>.</para>
747
748       <?ignore
749       <para>For more specific information about upgrading
750         instructions, see <uri
751           xlink:href="http://www.FreeBSD.org/releases/9.3R/installation.html">http://www.FreeBSD.org/releases/9.3R/installation.html</uri>.</para>
752
753       ?>
754       <important>
755         <para>Upgrading &os; should only be attempted
756           after backing up <emphasis>all</emphasis> data and
757           configuration files.</para>
758       </important>
759     </sect2>
760
761     <sect2>
762       <title xml:id="upgrade-pitfalls">User-Visible
763         Incompatibilities</title>
764
765       <para>&os;&nbsp;9.0 and later have several incompatibilities in
766         system configuration which you might want to know before
767         upgrading your system.  <emphasis>Please read this section and
768           the <link
769             xlink:href="http://www.freebsd.org/releases/9.0R/relnotes-detailed.html#UPGRADE">Upgrading
770             Section in 9.0-RELEASE Release Notes</link> carefully
771           before submitting a problem report and/or posting a question
772           to the &os; mailing lists.</emphasis></para>
773     </sect2>
774   </sect1>
775 </article>