release/doc/en_US.ISO8859-1/relnotes/article.xml

   1 <?xml version="1.0" encoding="iso-8859-1"?>
   2 <!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
   3         "../../../share/xml/freebsd50.dtd" [
   4 <!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN" "release.ent">
   5  %release;
   6 ]>
   7 <article xmlns="http://docbook.org/ns/docbook" xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0">
   8   <info><title>&os; &release.current; Release Notes</title>
   9
  10     <author><orgname>The &os; Project</orgname></author>
  11
  12     <pubdate>$FreeBSD$</pubdate>
  13
  14     <copyright>
  15       <year>2014</year>
  16       <holder role="mailto:doc@FreeBSD.org">The &os; Documentation Project</holder>
  17     </copyright>
  18
  19     <legalnotice xml:id="trademarks" role="trademarks">
  20       &tm-attrib.freebsd;
  21       &tm-attrib.ibm;
  22       &tm-attrib.ieee;
  23       &tm-attrib.intel;
  24       &tm-attrib.sparc;
  25       &tm-attrib.general;
  26     </legalnotice>
  27
  28     <abstract>
  29       <para>The release notes for &os; &release.current; contain a summary
  30         of the changes made to the &os; base system on the
  31         &release.branch; development line.
  32         This document lists applicable security advisories that were issued since
  33         the last release, as well as significant changes to the &os;
  34         kernel and userland.
  35         Some brief remarks on upgrading are also presented.</para>
  36     </abstract>
  37   </info>
  38
  39   <sect1 xml:id="intro">
  40     <title>Introduction</title>
  41
  42     <para>This document contains the release notes for &os;
  43       &release.current;.  It describes recently added, changed, or
  44       deleted features of &os;.  It also provides some notes on
  45       upgrading from previous versions of &os;.</para>
  46
  47     <para>This distribution of &os; &release.current; is a
  48       &release.type; distribution.  It can be found at <uri xlink:href="&release.url;">&release.url;</uri> or any of its mirrors.  More
  49       information on obtaining this (or other) &release.type;
  50       distributions of &os; can be found in the <link xlink:href="&url.books.handbook;/mirrors.html"><quote>Obtaining
  51       &os;</quote> appendix</link> to the <link xlink:href="&url.books.handbook;/">&os; Handbook</link>.</para>
  52
  53     <para>All users are encouraged to consult the release errata before
  54       installing &os;.  The errata document is updated with
  55       <quote>late-breaking</quote> information discovered late in the
  56       release cycle or after the release.  Typically, it contains
  57       information on known bugs, security advisories, and corrections to
  58       documentation.  An up-to-date copy of the errata for &os;
  59       &release.current; can be found on the &os; Web site.</para>
  60   </sect1>
  61
  62   <sect1 xml:id="new">
  63     <title>What's New</title>
  64
  65     <para>This section describes the most user-visible new or changed
  66       features in &os; since &release.prev;.</para>
  67
  68     <para>Typical release note items document recent security
  69       advisories issued after &release.prev;, new drivers or hardware
  70       support, new commands or options, major bug fixes, or
  71       contributed software upgrades.  They may also list changes to
  72       major ports/packages or release engineering practices.  Clearly
  73       the release notes cannot list every single change made to &os;
  74       between releases; this document focuses primarily on security
  75       advisories, user-visible changes, and major architectural
  76       improvements.</para>
  77
  78     <sect2 xml:id="security">
  79       <title>Security Advisories</title>
  80
  81       <para>Problems described in the following security advisories have
  82         been fixed.  For more information, consult the individual
  83         advisories available from
  84         <uri xlink:href="http://security.FreeBSD.org/">http://security.FreeBSD.org/</uri>.</para>
  85
  86       <informaltable frame="none" pgwide="1">
  87         <tgroup cols="3">
  88           <colspec colwidth="1*"/>
  89           <colspec colwidth="1*"/>
  90           <colspec colwidth="3*"/>
  91           <thead>
  92             <row>
  93               <entry>Advisory</entry>
  94               <entry>Date</entry>
  95               <entry>Topic</entry>
  96             </row>
  97           </thead>
  98
  99           <tbody>
 100             <row>
 101               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:01.openssl.asc">SA-12:01.openssl</link></entry>
 102               <entry>3&nbsp;May&nbsp;2012</entry>
 103               <entry><para>OpenSSL multiple vulnerabilities</para></entry>
 104             </row>
 105
 106             <row>
 107               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:02.crypt.asc">SA-12:02.crypt</link></entry>
 108               <entry>30&nbsp;May&nbsp;2012</entry>
 109               <entry><para>Incorrect <function>crypt()</function> hashing</para></entry>
 110             </row>
 111
 112             <row>
 113               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:03.bind.asc">SA-12:03.bind</link></entry>
 114               <entry>12&nbsp;June&nbsp;2012</entry>
 115               <entry><para>Incorrect handling of zero-length RDATA fields in &man.named.8;</para></entry>
 116             </row>
 117
 118             <row>
 119               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:04.sysret.asc">SA-12:04.sysret</link></entry>
 120               <entry>12&nbsp;June&nbsp;2012</entry>
 121               <entry><para>Privilege escalation when returning from kernel</para></entry>
 122             </row>
 123
 124             <row>
 125               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:05.bind.asc">SA-12:05.bind</link></entry>
 126               <entry>6&nbsp;August&nbsp;2012</entry>
 127               <entry><para>&man.named.8; DNSSEC validation Denial of Service</para></entry>
 128             </row>
 129
 130             <row>
 131               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:06.bind.asc">SA-12:06.bind</link></entry>
 132               <entry>22&nbsp;November&nbsp;2012</entry>
 133               <entry><para>Multiple Denial of Service vulnerabilities with &man.named.8;</para></entry>
 134             </row>
 135
 136             <row>
 137               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:07.hostapd.asc">SA-12:07.hostapd</link></entry>
 138               <entry>22&nbsp;November&nbsp;2012</entry>
 139               <entry><para>Insufficient message length validation for EAP-TLS messages</para></entry>
 140             </row>
 141
 142             <row>
 143               <entry><link xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-12:08.linux.asc">SA-12:08.linux</link></entry>
 144               <entry>22&nbsp;November&nbsp;2012</entry>
 145               <entry><para>Linux compatibility layer input validation error</para></entry>
 146             </row>
 147           </tbody>
 148         </tgroup>
 149       </informaltable>
 150     </sect2>
 151
 152     <sect2 xml:id="kernel">
 153       <title>Kernel Changes</title>
 154
 155       <para revision="262153">The &man.netmap.4; framework has been
 156         updated to match the version in <literal>head/</literal>,
 157         which includes netmap pipes, kqueue support, and enhanced
 158         VALE switch port.</para>
 159
 160       <para revision="262175">A deadlock triggered by sending
 161         a mounted &man.zfs.8; snapshot has been fixed.</para>
 162
 163       <para revision="262231">Support for SIIG X1 PCI-e has been added
 164         to &man.ppc.4;.</para>
 165
 166       <para revision="262564">Support for the ext4 filesystem
 167         has been enabled, supporting read-only mounts.</para>
 168
 169       <para revision="262594">A kernel panic triggered by inserting
 170         a USB ethernet device on VIMAGE-enabled systems has been
 171         fixed.</para>
 172
 173       <para revision="262988">TTM, a memory manager used by video
 174         drivers, has been merged.</para>
 175
 176       <para revision="263103">Support for
 177         <literal>/sys/kernel/random/uuid</literal> has been added
 178         to &man.linprocfs.5;.</para>
 179
 180       <para revision="263128">A memory leak in the
 181         <literal>zpool_in_use()</literal> function has been
 182         fixed.</para>
 183
 184       <para revision="263391">The
 185         <literal>extensible_dataset</literal> &man.zpool.8; feature
 186         has been added.  See &man.zpool-features.7; for more
 187         information.</para>
 188
 189       <para revision="263408">A memory leak has been fixed in
 190         <literal>libzfs</literal>.</para>
 191
 192       <sect3 xml:id="boot">
 193         <title>Boot Loader Changes</title>
 194
 195         <para>&nbsp;</para>
 196
 197       </sect3>
 198
 199       <sect3 xml:id="proc">
 200         <title>Hardware Support</title>
 201
 202         <para revision="262968">The &man.mfi.4; driver has been
 203           updated to support MegaRAID Fury cards.</para>
 204
 205         <para revision="263170,263171">The Radeon KMS driver has been
 206           added.</para>
 207
 208         <para revision="263340">The &man.aacraid.4; driver has been
 209           updated to version 3.2.5.</para>
 210
 211         <sect4 xml:id="mm">
 212           <title>Multimedia Support</title>
 213
 214           <para>&nbsp;</para>
 215
 216         </sect4>
 217
 218         <sect4 xml:id="net-if">
 219           <title>Network Interface Support</title>
 220
 221           <para revision="262153">The &man.axge.4; driver has been
 222             added.</para>
 223
 224           <para revision="262362">The &man.urndis.4; driver has been
 225             imported from OpenBSD.</para>
 226
 227         </sect4>
 228       </sect3>
 229
 230       <sect3 xml:id="net-proto">
 231         <title>Network Protocols</title>
 232
 233         <para>&nbsp;</para>
 234
 235       </sect3>
 236
 237       <sect3 xml:id="disks">
 238         <title>Disks and Storage</title>
 239
 240         <para>&nbsp;</para>
 241
 242       </sect3>
 243
 244       <sect3 xml:id="fs">
 245         <title>File Systems</title>
 246
 247         <para revision="263410">The &man.zfs.8; filesystem has been
 248           updated to support the <literal>bookmarks</literal>
 249           feature.</para>
 250
 251       </sect3>
 252     </sect2>
 253
 254     <sect2 xml:id="userland">
 255       <title>Userland Changes</title>
 256
 257       <para revision="262124">The default number of &man.nfsd.8;
 258         threads has been increased from <literal>4</literal> to
 259         <literal>(8 * N)</literal>, where <literal>N</literal> is
 260         the number of CPUs as reported by
 261         <command>sysctl -n hw.ncpu</command>.</para>
 262
 263       <para revision="262134">The &man.pciconf.8; utility now has
 264         a <literal>-V</literal> flag, which lists VPD data for
 265         each device.</para>
 266
 267       <para revision="262158">A bug that would allow creating
 268         a &man.zfs.8; snapshot of an inconsistent dataset has been
 269         fixed.</para>
 270
 271       <para revision="262160">Receiving a &man.zfs.8; dataset with
 272         <command>zfs recv -F</command> now properly destroys any
 273         snapshots that were created since the incremental source
 274         snapshot.</para>
 275
 276       <para revision="262706"><application>BIND</application> has
 277         been updated to version 9.9.5.</para>
 278
 279       <para revision="263031">Installation from a read-only
 280         <envar>.OBJDIR</envar> has been fixed.</para>
 281
 282       <para revision="263031">A new shared library directory,
 283         <filename class="directory">/usr/lib/private</filename>,
 284         has been added for internal-use shared libraries.</para>
 285
 286       <para revision="263031">A default
 287         <filename>libmap32.conf</filename> has been added, for 32-bit
 288         applications.</para>
 289
 290       <para revision="263032">The <literal>libucl</literal> library
 291         a JSON-compatible configuration file parsing library,has been
 292         imported.</para>
 293
 294       <para revision="263038">The &man.pkg.7; package management
 295         utility has been syncronized with <literal>head/</literal>.
 296         This implements binary package signature verification when
 297         bootstrapping the system with <command>pkg
 298           bootstrap</command>.</para>
 299
 300       <para revision="263042">The system timezone data files have
 301         been updated to version tzdata2014a.</para>
 302
 303       <para revision="263212">The NetBSD &man.make.1; utility,
 304         <command>bmake</command> has been imported for compatibility
 305         with the &os;&nbsp;Ports Collection.  It is installed as
 306         <command>bmake</command>, and the <command>make</command>
 307         remains the &os; version.</para>
 308
 309       <para revision="263286">The &man.xz.1; utility has been updated
 310         to a post-5.0.5 snapshot.</para>
 311
 312       <para revision="263326">The &man.fetch.3; library now
 313         supports <literal>Last-Modified</literal> timestamps which
 314         return UTC instead of GMT.</para>
 315
 316       <para revision="263404">Aliases for the &man.zfs.8; commands
 317         <literal>list -t snap</literal> and <literal>snap</literal>
 318         have been added to match &oracle;&nbsp;Solaris 11.</para>
 319
 320       <para revision="263406">A new flag, <literal>-p</literal>, has
 321         been added to the &man.zfs.8; <literal>list</literal> command,
 322         providing output in a parseable form.</para>
 323
 324       <para revision="263421"><application>OpenPAM</application> has
 325         been updated to Nummularia (20130907), which incorporates
 326         several bug fixes and documentation improvements.  The
 327         &man.openpam.ttyconv.3; library has been completely
 328         rewritten.</para>
 329
 330       <sect3 xml:id="periodic-scripts">
 331         <title>&man.periodic.8; Scripts</title>
 332
 333         <para>&nbsp;</para>
 334
 335       </sect3>
 336
 337       <sect3 xml:id="rc-scripts">
 338         <title>&man.rc.8; Scripts</title>
 339
 340         <para>&nbsp;</para>
 341
 342       </sect3>
 343     </sect2>
 344
 345     <sect2 xml:id="contrib">
 346       <title>Contributed Software</title>
 347
 348       <para>&nbsp;</para>
 349
 350     </sect2>
 351
 352     <sect2 xml:id="releng">
 353       <title>Release Engineering and Integration</title>
 354
 355       <para revision="262879">The <filename>release.sh</filename>
 356         script and release <filename>Makefile</filename> have been
 357         updated to use &man.pkg.7; to populate the dvd installation
 358         medium.</para>
 359
 360       <para revision="263028">The &man.services.mkdb.8; utility has
 361         been updated to support multiple byte orders.  Similar to
 362         &man.cap.mkdb.1;, the <filename>services.db</filename> will
 363         be created with proper endinanness as part of
 364         cross-architecture release builds.</para>
 365
 366     </sect2>
 367   </sect1>
 368
 369   <sect1 xml:id="upgrade">
 370     <title>Upgrading from previous releases of &os;</title>
 371
 372     <sect2>
 373       <title>Upgrading using &man.freebsd-update.8; or a source-based
 374         procedure</title>
 375
 376       <para arch="amd64,i386">Binary upgrades between RELEASE versions
 377         (and snapshots of the various security branches) are supported
 378         using the &man.freebsd-update.8; utility.  The binary upgrade
 379         procedure will update unmodified userland utilities, as well
 380         as an unmodified <filename>GENERIC</filename> kernel,
 381         distributed as a part of an official &os; release.  The
 382         &man.freebsd-update.8; utility requires that the host being
 383         upgraded have Internet connectivity.</para>
 384
 385       <para>Source-based upgrades (those based on recompiling the &os;
 386         base system from source code) from previous versions are
 387         supported using to the instructions in
 388         <filename>/usr/src/UPDATING</filename>.</para>
 389
 390       <para>For more specific information about upgrading
 391         instructions, see <uri xlink:href="http://www.FreeBSD.org/releases/9.1R/installation.html">http://www.FreeBSD.org/releases/9.1R/installation.html</uri>.</para>
 392
 393       <important>
 394         <para>Upgrading &os; should, of course, only be attempted
 395           after backing up <emphasis>all</emphasis> data and
 396           configuration files.</para>
 397       </important>
 398     </sect2>
 399
 400     <sect2>
 401       <title xml:id="upgrade-pitfalls">User-visible incompatibilities</title>
 402
 403       <para>FreeBSD 9.0 and later have several incompatibilities in
 404         system configuration which you might want to know before
 405         upgrading your system.  <emphasis>Please read this section and
 406         the <link xlink:href="http://www.freebsd.org/releases/9.0R/relnotes-detailed.html#UPGRADE">Upgrading
 407         Section in 9.0-RELEASE Release Notes</link> carefully before
 408         submitting a problem report and/or posting a question to the
 409         FreeBSD mailing lists.</emphasis></para>
 410     </sect2>
 411   </sect1>
 412 </article>