release/doc/en_US.ISO8859-1/relnotes/article.xml

   1 <?xml version="1.0" encoding="iso-8859-1"?>
   2 <!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
   3         "../../../share/xml/freebsd50.dtd" [
   4 <!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN" "release.ent">
   5  %release;
   6 ]>
   7 <article xmlns="http://docbook.org/ns/docbook" xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0">
   8   <info><title>&os; &release.current; Release Notes</title>
   9
  10     <author><orgname>The &os; Project</orgname></author>
  11
  12     <pubdate>$FreeBSD$</pubdate>
  13
  14     <copyright>
  15       <year>2014</year>
  16       <holder role="mailto:doc@FreeBSD.org">The &os; Documentation Project</holder>
  17     </copyright>
  18
  19     <legalnotice xml:id="trademarks" role="trademarks">
  20       &tm-attrib.freebsd;
  21       &tm-attrib.ibm;
  22       &tm-attrib.ieee;
  23       &tm-attrib.intel;
  24       &tm-attrib.sparc;
  25       &tm-attrib.general;
  26     </legalnotice>
  27
  28     <abstract>
  29       <para>The release notes for &os; &release.current; contain a summary
  30         of the changes made to the &os; base system on the
  31         &release.branch; development line.
  32         This document lists applicable security advisories that were issued since
  33         the last release, as well as significant changes to the &os;
  34         kernel and userland.
  35         Some brief remarks on upgrading are also presented.</para>
  36     </abstract>
  37   </info>
  38
  39   <sect1 xml:id="intro">
  40     <title>Introduction</title>
  41
  42     <para>This document contains the release notes for &os;
  43       &release.current;.  It describes recently added, changed, or
  44       deleted features of &os;.  It also provides some notes on
  45       upgrading from previous versions of &os;.</para>
  46
  47     <para>This distribution of &os; &release.current; is a
  48       &release.type; distribution.  It can be found at <uri xlink:href="&release.url;">&release.url;</uri> or any of its mirrors.  More
  49       information on obtaining this (or other) &release.type;
  50       distributions of &os; can be found in the <link xlink:href="&url.books.handbook;/mirrors.html"><quote>Obtaining
  51       &os;</quote> appendix</link> to the <link xlink:href="&url.books.handbook;/">&os; Handbook</link>.</para>
  52
  53     <para>All users are encouraged to consult the release errata before
  54       installing &os;.  The errata document is updated with
  55       <quote>late-breaking</quote> information discovered late in the
  56       release cycle or after the release.  Typically, it contains
  57       information on known bugs, security advisories, and corrections to
  58       documentation.  An up-to-date copy of the errata for &os;
  59       &release.current; can be found on the &os; Web site.</para>
  60   </sect1>
  61
  62   <sect1 xml:id="new">
  63     <title>What's New</title>
  64
  65     <para>This section describes the most user-visible new or changed
  66       features in &os; since &release.prev;.</para>
  67
  68     <para>Typical release note items document recent security
  69       advisories issued after &release.prev;, new drivers or hardware
  70       support, new commands or options, major bug fixes, or
  71       contributed software upgrades.  They may also list changes to
  72       major ports/packages or release engineering practices.  Clearly
  73       the release notes cannot list every single change made to &os;
  74       between releases; this document focuses primarily on security
  75       advisories, user-visible changes, and major architectural
  76       improvements.</para>
  77
  78     <sect2 xml:id="security">
  79       <title>Security Advisories</title>
  80
  81       <para>Problems described in the following security advisories have
  82         been fixed.  For more information, consult the individual
  83         advisories available from
  84         <uri xlink:href="http://security.FreeBSD.org/">http://security.FreeBSD.org/</uri>.</para>
  85
  86       <informaltable frame="none" pgwide="1">
  87         <tgroup cols="3">
  88           <colspec colwidth="1*"/>
  89           <colspec colwidth="1*"/>
  90           <colspec colwidth="3*"/>
  91           <thead>
  92             <row>
  93               <entry>Advisory</entry>
  94               <entry>Date</entry>
  95               <entry>Topic</entry>
  96             </row>
  97           </thead>
  98
  99           <tbody>
 100             <row>
 101               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:01.openssl.asc">SA-12:01.openssl</link></entry>
 102               <entry>3&nbsp;May&nbsp;2012</entry>
 103               <entry><para>OpenSSL multiple vulnerabilities</para></entry>
 104             </row>
 105
 106             <row>
 107               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:02.crypt.asc">SA-12:02.crypt</link></entry>
 108               <entry>30&nbsp;May&nbsp;2012</entry>
 109               <entry><para>Incorrect <function>crypt()</function> hashing</para></entry>
 110             </row>
 111
 112             <row>
 113               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:03.bind.asc">SA-12:03.bind</link></entry>
 114               <entry>12&nbsp;June&nbsp;2012</entry>
 115               <entry><para>Incorrect handling of zero-length RDATA fields in &man.named.8;</para></entry>
 116             </row>
 117
 118             <row>
 119               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:04.sysret.asc">SA-12:04.sysret</link></entry>
 120               <entry>12&nbsp;June&nbsp;2012</entry>
 121               <entry><para>Privilege escalation when returning from kernel</para></entry>
 122             </row>
 123
 124             <row>
 125               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:05.bind.asc">SA-12:05.bind</link></entry>
 126               <entry>6&nbsp;August&nbsp;2012</entry>
 127               <entry><para>&man.named.8; DNSSEC validation Denial of Service</para></entry>
 128             </row>
 129
 130             <row>
 131               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:06.bind.asc">SA-12:06.bind</link></entry>
 132               <entry>22&nbsp;November&nbsp;2012</entry>
 133               <entry><para>Multiple Denial of Service vulnerabilities with &man.named.8;</para></entry>
 134             </row>
 135
 136             <row>
 137               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:07.hostapd.asc">SA-12:07.hostapd</link></entry>
 138               <entry>22&nbsp;November&nbsp;2012</entry>
 139               <entry><para>Insufficient message length validation for EAP-TLS messages</para></entry>
 140             </row>
 141
 142             <row>
 143               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:08.linux.asc">SA-12:08.linux</link></entry>
 144               <entry>22&nbsp;November&nbsp;2012</entry>
 145               <entry><para>Linux compatibility layer input validation error</para></entry>
 146             </row>
 147           </tbody>
 148         </tgroup>
 149       </informaltable>
 150     </sect2>
 151
 152     <sect2 xml:id="kernel">
 153       <title>Kernel Changes</title>
 154
 155       <para revision="261483">Support for GPS ports has been added
 156         to the &man.uhso.4; driver.</para>
 157
 158       <para revision="262116">A memory leak of compressed buffers
 159         has been fixed in
 160         <literal>l2arc_write_done()</literal>.</para>
 161
 162       <para revision="262153">The &man.netmap.4; framework has been
 163         updated to match the version in <literal>head/</literal>,
 164         which includes netmap pipes, kqueue support, and enhanced
 165         VALE switch port.</para>
 166
 167       <para revision="262175">A deadlock triggered by sending
 168         a mounted &man.zfs.8; snapshot has been fixed.</para>
 169
 170       <para revision="262231">Support for SIIG X1 PCI-e has been added
 171         to &man.ppc.4;.</para>
 172
 173       <para revision="262564">Support for the ext4 filesystem
 174         has been enabled, supporting read-only mounts.</para>
 175
 176       <para revision="262594">A kernel panic triggered by inserting
 177         a USB ethernet device on VIMAGE-enabled systems has been
 178         fixed.</para>
 179
 180       <para revision="262988">TTM, a memory manager used by video
 181         drivers, has been merged.</para>
 182
 183       <para revision="263103">Support for
 184         <literal>/sys/kernel/random/uuid</literal> has been added
 185         to &man.linprocfs.5;.</para>
 186
 187       <para revision="263128">A memory leak in the
 188         <literal>zpool_in_use()</literal> function has been
 189         fixed.</para>
 190
 191       <para revision="263391">The
 192         <literal>extensible_dataset</literal> &man.zpool.8; feature
 193         has been added.  See &man.zpool-features.7; for more
 194         information.</para>
 195
 196       <para revision="263408">A memory leak has been fixed in
 197         <literal>libzfs</literal>.</para>
 198
 199       <sect3 xml:id="boot">
 200         <title>Boot Loader Changes</title>
 201
 202         <para>&nbsp;</para>
 203
 204       </sect3>
 205
 206       <sect3 xml:id="proc">
 207         <title>Hardware Support</title>
 208
 209         <para revision="261510">Trackpad support for
 210           &apple;&nbsp;MacBook products has been added.</para>
 211
 212         <para revision="261973">The &man.nve.4; driver has been
 213           deprecated, and the &man.nfe.4; driver should be used
 214           instead.</para>
 215
 216         <para revision="262968">The &man.mfi.4; driver has been
 217           updated to support MegaRAID Fury cards.</para>
 218
 219         <para revision="263170,263171">The Radeon KMS driver has been
 220           added.</para>
 221
 222         <para revision="263340">The &man.aacraid.4; driver has been
 223           updated to version 3.2.5.</para>
 224
 225         <sect4 xml:id="mm">
 226           <title>Multimedia Support</title>
 227
 228           <para>&nbsp;</para>
 229
 230         </sect4>
 231
 232         <sect4 xml:id="net-if">
 233           <title>Network Interface Support</title>
 234
 235           <para revision="261865">The &man.run.4; driver has been
 236             updated to include support for the MediaTek/Ralink RT3593
 237             chipset.</para>
 238
 239           <para revision="261933">The &man.run.4; driver has been
 240             updated to include support for the DLINK DWA-127 wireless
 241             adapter.</para>
 242
 243           <para revision="262153">The &man.axge.4; driver has been
 244             added.</para>
 245
 246           <para revision="262362">The &man.urndis.4; driver has been
 247             imported from OpenBSD.</para>
 248
 249         </sect4>
 250       </sect3>
 251
 252       <sect3 xml:id="net-proto">
 253         <title>Network Protocols</title>
 254
 255         <para>&nbsp;</para>
 256
 257       </sect3>
 258
 259       <sect3 xml:id="disks">
 260         <title>Disks and Storage</title>
 261
 262         <para>&nbsp;</para>
 263
 264       </sect3>
 265
 266       <sect3 xml:id="fs">
 267         <title>File Systems</title>
 268
 269         <para revision="263410">The &man.zfs.8; filesystem has been
 270           updated to support the <literal>bookmarks</literal>
 271           feature.</para>
 272
 273       </sect3>
 274     </sect2>
 275
 276     <sect2 xml:id="userland">
 277       <title>Userland Changes</title>
 278
 279       <para revision="261674">A bug that could trigger an infinite
 280         loop in KDE and X has been fixed.</para>
 281
 282       <para revision="262076">The &man.newsyslog.8; utility has been
 283         changed to use the size of the file, instead of the blocks the
 284         file takes on the disk to matche the behavior documented in
 285         &man.newsyslog.conf.5;.</para>
 286
 287       <para revision="262105">A bug in &man.zdb.8; which would cause
 288         numeric parameters to a flag as being treated as additional
 289         flags has been fixed.</para>
 290
 291       <para revision="262124">The default number of &man.nfsd.8;
 292         threads has been increased from <literal>4</literal> to
 293         <literal>(8 * N)</literal>, where <literal>N</literal> is
 294         the number of CPUs as reported by
 295         <command>sysctl -n hw.ncpu</command>.</para>
 296
 297       <para revision="262134">The &man.pciconf.8; utility now has
 298         a <literal>-V</literal> flag, which lists information such
 299         as serial numbers for each device.</para>
 300
 301       <para revision="262158">A bug that would allow creating
 302         a &man.zfs.8; snapshot of an inconsistent dataset has been
 303         fixed.</para>
 304
 305       <para revision="262160">Receiving a &man.zfs.8; dataset with
 306         <command>zfs recv -F</command> now properly destroys any
 307         snapshots that were created since the incremental source
 308         snapshot.</para>
 309
 310       <para revision="262706"><application>BIND</application> has
 311         been updated to version 9.9.5.</para>
 312
 313       <para revision="263031">Installation from a read-only
 314         <envar>.OBJDIR</envar> has been fixed.</para>
 315
 316       <para revision="263031">A new shared library directory,
 317         <filename class="directory">/usr/lib/private</filename>,
 318         has been added for internal-use shared libraries.</para>
 319
 320       <para revision="263031">A default
 321         <filename>libmap32.conf</filename> has been added, for 32-bit
 322         applications.</para>
 323
 324       <para revision="263032">The <literal>libucl</literal> library
 325         a JSON-compatible configuration file parsing library,has been
 326         imported.</para>
 327
 328       <para revision="263038">The &man.pkg.7; package management
 329         utility has been syncronized with <literal>head/</literal>.
 330         This implements binary package signature verification when
 331         bootstrapping the system with <command>pkg
 332           bootstrap</command>.</para>
 333
 334       <para revision="263042">The system timezone data files have
 335         been updated to version tzdata2014a.</para>
 336
 337       <para revision="263212">The NetBSD &man.make.1; utility,
 338         <command>bmake</command> has been imported for compatibility
 339         with the &os;&nbsp;Ports Collection.  It is installed as
 340         <command>bmake</command>, and the <command>make</command>
 341         remains the &os; version.</para>
 342
 343       <para revision="263286">The &man.xz.1; utility has been updated
 344         to a post-5.0.5 snapshot.</para>
 345
 346       <para revision="263326">The &man.fetch.3; library now
 347         supports <literal>Last-Modified</literal> timestamps which
 348         return UTC instead of GMT.</para>
 349
 350       <para revision="263404">Aliases for the &man.zfs.8; commands
 351         <literal>list -t snap</literal> and <literal>snap</literal>
 352         have been added to match &oracle;&nbsp;Solaris 11.</para>
 353
 354       <para revision="263406">A new flag, <literal>-p</literal>, has
 355         been added to the &man.zfs.8; <literal>list</literal> command,
 356         providing output in a parseable form.</para>
 357
 358       <para revision="263421"><application>OpenPAM</application> has
 359         been updated to Nummularia (20130907), which incorporates
 360         several bug fixes and documentation improvements.  The
 361         &man.openpam.ttyconv.3; library has been completely
 362         rewritten.</para>
 363
 364       <sect3 xml:id="periodic-scripts">
 365         <title>&man.periodic.8; Scripts</title>
 366
 367         <para>&nbsp;</para>
 368
 369       </sect3>
 370
 371       <sect3 xml:id="rc-scripts">
 372         <title>&man.rc.8; Scripts</title>
 373
 374         <para>&nbsp;</para>
 375
 376       </sect3>
 377     </sect2>
 378
 379     <sect2 xml:id="contrib">
 380       <title>Contributed Software</title>
 381
 382       <para>&nbsp;</para>
 383
 384     </sect2>
 385
 386     <sect2 xml:id="releng">
 387       <title>Release Engineering and Integration</title>
 388
 389       <para revision="262879">The <filename>release.sh</filename>
 390         script and release <filename>Makefile</filename> have been
 391         updated to use &man.pkg.7; to populate the dvd installation
 392         medium.</para>
 393
 394       <para revision="263028">The &man.services.mkdb.8; utility has
 395         been updated to support multiple byte orders.  Similar to
 396         &man.cap.mkdb.1;, the <filename>services.db</filename> will
 397         be created with proper endinanness as part of
 398         cross-architecture release builds.</para>
 399
 400     </sect2>
 401   </sect1>
 402
 403   <sect1 xml:id="upgrade">
 404     <title>Upgrading from previous releases of &os;</title>
 405
 406     <sect2>
 407       <title>Upgrading using &man.freebsd-update.8; or a source-based
 408         procedure</title>
 409
 410       <para arch="amd64,i386">Binary upgrades between RELEASE versions
 411         (and snapshots of the various security branches) are supported
 412         using the &man.freebsd-update.8; utility.  The binary upgrade
 413         procedure will update unmodified userland utilities, as well
 414         as an unmodified <filename>GENERIC</filename> kernel,
 415         distributed as a part of an official &os; release.  The
 416         &man.freebsd-update.8; utility requires that the host being
 417         upgraded have Internet connectivity.</para>
 418
 419       <para>Source-based upgrades (those based on recompiling the &os;
 420         base system from source code) from previous versions are
 421         supported using to the instructions in
 422         <filename>/usr/src/UPDATING</filename>.</para>
 423
 424       <para>For more specific information about upgrading
 425         instructions, see <uri xlink:href="http://www.FreeBSD.org/releases/9.1R/installation.html">http://www.FreeBSD.org/releases/9.1R/installation.html</uri>.</para>
 426
 427       <important>
 428         <para>Upgrading &os; should, of course, only be attempted
 429           after backing up <emphasis>all</emphasis> data and
 430           configuration files.</para>
 431       </important>
 432     </sect2>
 433
 434     <sect2>
 435       <title xml:id="upgrade-pitfalls">User-visible incompatibilities</title>
 436
 437       <para>FreeBSD 9.0 and later have several incompatibilities in
 438         system configuration which you might want to know before
 439         upgrading your system.  <emphasis>Please read this section and
 440         the <link xlink:href="http://www.freebsd.org/releases/9.0R/relnotes-detailed.html#UPGRADE">Upgrading
 441         Section in 9.0-RELEASE Release Notes</link> carefully before
 442         submitting a problem report and/or posting a question to the
 443         FreeBSD mailing lists.</emphasis></para>
 444     </sect2>
 445   </sect1>
 446 </article>