The &os; Project $FreeBSD$ 2016 The &os; Documentation Project &tm-attrib.freebsd; &tm-attrib.ibm; &tm-attrib.ieee; &tm-attrib.intel; &tm-attrib.sparc; &tm-attrib.general; The release notes for &os; &release.current; contain a summary of the changes made to the &os; base system on the &release.branch; development line. This document lists applicable security advisories that were issued since the last release, as well as significant changes to the &os; kernel and userland. Some brief remarks on upgrading are also presented. This document contains the release notes for &os; &release.current;. It describes recently added, changed, or deleted features of &os;. It also provides some notes on upgrading from previous versions of &os;. The &release.type; distribution to which these release notes apply represents the latest point along the &release.branch; development branch since &release.branch; was created. Information regarding pre-built, binary &release.type; distributions along this branch can be found at &release.url;. The &release.type; distribution to which these release notes apply represents a point along the &release.branch; development branch between &release.prev; and the future &release.next;. Information regarding pre-built, binary &release.type; distributions along this branch can be found at &release.url;. This distribution of &os; &release.current; is a &release.type; distribution. It can be found at &release.url; or any of its mirrors. More information on obtaining this (or other) &release.type; distributions of &os; can be found in the Obtaining &os; appendix to the &os; Handbook. All users are encouraged to consult the release errata before installing &os;. The errata document is updated with late-breaking information discovered late in the release cycle or after the release. Typically, it contains information on known bugs, security advisories, and corrections to documentation. An up-to-date copy of the errata for &os; &release.current; can be found on the &os; Web site. This document describes the most user-visible new or changed features in &os; since &release.prev;. Typical release note items document recent security advisories issued after &release.prev;, new drivers or hardware support, new commands or options, major bug fixes, or contributed software upgrades. They may also list changes to major ports/packages or release engineering practices. Clearly the release notes cannot list every single change made to &os; between releases; this document focuses primarily on security advisories, user-visible changes, and major architectural improvements. Binary upgrades between RELEASE versions (and snapshots of the various security branches) are supported using the &man.freebsd-update.8; utility. The binary upgrade procedure will update unmodified userland utilities, as well as unmodified GENERIC kernel distributed as a part of an official &os; release. The &man.freebsd-update.8; utility requires that the host being upgraded have Internet connectivity. Source-based upgrades (those based on recompiling the &os; base system from source code) from previous versions are supported, according to the instructions in /usr/src/UPDATING. Upgrading &os; should only be attempted after backing up all data and configuration files. This section lists the various Security Advisories and Errata Notices since &release.prev;. &security; &errata; This section covers changes and additions to userland applications, contributed software, and system utilities. The &man.ar.1; utility now supports a -D flag to prevent real mtime, uid, gid, and file mode values from being inserted. This is called deterministic mode and useful for making the resulting archives reproducible. This behavior is enabled by default, and can be disabled by specifying a -U flag. The &man.camcontrol.8; fwdownload subcommand has been improved. Changes include better support of SATA drives, downloading firmaware to IBM LTO drives, -q flag to suppress information output, and opcodes subcommand to issue the REPORT SUPPORTED OPCODES service action of the SCSI MAINTENANCE IN command. The &man.cp.1; utility has been updated to include a new flag, -s, which creates a symbolic link to the specified source. A bug in the &man.ctladm.8; utility which could return a non-zero value even if it succeeds has been fixed. A bug in the &man.grdc.6; program which caused a wrong display in the 12-hour mode has been fixed. The &man.ifconfig.8; utility now reports SFP/SFP+ data when a -v flag is specified and the NIC driver provides them. Bugs in the &man.inetd.8; daemon which could cause a crash when an RPC entry is defined and an IPv6 address is specified in -a flag have been fixed. The &man.jail.8; utility has been updated to include a new flag, -l, which ensures a clean environment in the target jail when used. Additionally, &man.jail.8; will run a shell within the target jail when run no commands are specified. The &man.last.1; utility now supports reboot as a pseudo-user name which prints all system reboot entries (SHUTDOWN_TIME and BOOT_TIME records). This was accidentally removed as of &os; 9.0. The &man.mv.1; utility now returns 1 instead of 64 when more than two arguments are specified and the target is not a valid directory. The &man.mkimg.1; utility has been updated to include support for NTFS filesystems in both MBR and GPT partitioning schemes. A bug in the &man.mkimg.1; utility which prevented dynamic VHD format from working with QEMU has been fixed. A bug in the &man.netstat.1; utility which showed the statistics in the number of packets divided by 1024, not 1000 has been fixed. The &man.pciconf.8; utility has been updated to use the PCI ID database from the misc/pciids package, if present, falling back to the PCI ID database in the &os; base system. A new utility, &man.sesutil.8;, has been added, which is used to manage &man.ses.4; devices. Support for a -manage-gids flag has been added to &man.nfsuserd.8;. This option can be enabled at boot time by setting an &man.rc.conf.5; variable nfs_server_managegids to YES. The &man.pkill.1; utility now supports &man.jail.2; name in a -j option in addition to &man.jail.2; ID. userdel and usermod subcommand of the &man.pw.8; utility now supports a -y flag. The resolver library has been updated to reload /etc/resolv.conf if the modification time has changed. The initial implementation of reroot support has been added to the &man.reboot.8; utility, allowing the root filesystem to be mounted from a temporary source filesystem without requiring a full system reboot. The &man.timeout.1; utility has been added. This utility runs a command with a time limit and is compatible with GNU timeout. The &man.watchdogd.8; daemon now supports a -x exit_timeout option to specify the timeout period in seconds to leave in effect when the program exits. The &man.ypinit.8; script now supports eui64 NIS map file. A bug in &man.libarchive.3; library which could report an error when handling a sparse file entry in a tar file has been fixed by importing changeset bf4f6ec64e. Time zone database has been updated to version 2015f. The &man.file.1; utility has been updated to version 5.25. The &man.xz.1; utility has been updated to version 5.2.2, which provides support for multi-threaded compression. The &man.ntpd.8; utility has been updated to version 4.2.8p5. The &man.unbound.8; utility has been updated to version 1.5.7. The &man.less.1; utility has been updated to version v481. The unbound-control-setup script has been removed from the base system. The &man.unbound.8; utility has been updated to enable the insecure-lan-zones option in preference of listing each AS112 zone individually. The OpenSSL suite has been updated to version 1.0.1s. The OpenSSH suite has been updated to version 7.2p2. The &man.bsdinstall.8; utility has been updated to support ZFS installation on EFI-based systems. The rc.d/netwait script has been updated to wait for network interfaces that attach late in the boot process, such as some USB network cards. Firewall rules set by firewall_type="SIMPLE" now uses &man.ipfw.4; tables for addresses to be blocked. The rc.d/netif script now updates only static routes when an interface is specified. This section covers changes to kernel configurations, system tuning, and system control parameters that are not otherwise categorized. The &man.vt.4; terminal console driver now supports ALT_BREAK_TO_DEBUGGER and debug.kdb.alt_break_to_debugger sysctl variable when kernel debugger support (options KDB) is enabled. The &man.vt.4; terminal console driver now supports kern.vt.bell_enable sysctl variable to enable or disable terminal bell. The default is 1 (enabled). A thread_create() function has been added as an API to create userspace thread in kernel space. The &man.kqueue.2; system call has been updated to handle write events to files larger than 2 gigabytes. The &man.pms.4; driver has been removed from GENERIC kernel. A &man.sysctl.3; variable kern.features.invariants has been added. It shows if the kernel is compiled with INVARIANTS or not. A bug which could prevent a loader tunable kern.racct.enable from working has been fixed. This section covers changes and additions to devices and device drivers since &release.prev;. The imxwdt driver, which supports Freescale i.MX watchdog, has been fixed. The &man.puc.4; driver now supports MSI interrupts and prefers it to the legacy interrupts. This behavior can be disabled by setting hw.puc.msi_disable loader tunable. A bug in the &man.uart.4; driver which could cause a polarity reversal of PPS (Pulse Per Second) capture events has been fixed. The trailing edge of a positive PPS pulse and the leading edge of the next pulse were used as "assert" and "clear" event respectively. The &man.uart.4; driver now supports runtime configuration of PPS signal source captured by the driver via dev.uart.pps_mode and dev.uart.0.pps_mode sysctl variables. The values 0, 1, and 2 correspond to disabled, capturing pulses on the CTS line, and capturing pulses on the DCD line, respectively. The default value is 2. The &man.uftdi.4; driver now supports UFTDIIOC_READ_EEPROM, UFTDIIOC_WRITE_EEPROM, and UFTDIIOC_ERASE_EEPROM &man.ioctl.2; to read/write serial EEPROM attached to the controller chip. Legacy &man.ata.4; drivers such as ataahci, ataadaptec, and mv_sata have been removed in favor of the new drivers such as &man.ahci.4;, &man.siis.4;, and &man.mvs.4;. The CTL High Availability implementation has been rewritten. The &man.ctl.4; driver has been updated to support CD-ROM and removable devices. The &man.isp.4; driver has been updated and improved: added support for 16Gbps FC cards, improved target mode support, completed Multi-ID (NPIV) functionality. The &man.ixgbe.4; driver has been updated to version 3.1.13-k. Firmwares for model T4 and T5 bundled with the &man.cxgbe.4; driver have been updated to version 1.14.4.0. This section covers general hardware support for physical machines, hypervisors, and virtualization environments, as well as hardware changes and updates that do not otherwise fit in other sections of this document. The &man.ismt.4; driver has been added, providing support for recent &intel; SMBus 2.0 controllers. The &man.xen.4; driver has been updated to include support for blkif indirect segment I/O. This section covers changes and additions to file systems and other storage subsystems, both local and networked. The &man.zfs.8; l2arc code has been updated to take ashift into account when gathering buffers to be written to the l2arc device. This section covers the boot loader, boot menu, and other boot-related changes. Initial terminal emulation support has been added to loader.efi for UEFI-based systems. Initial ZFS boot support has been added to the EFI implementation. The UEFI loader has been updated to support multiple ZFS boot environments, such as those provided by sysutils/beadm. The UEFI boot menu has been updated to enable the Beastie menu, similiar to the traditional &man.sc.4; boot menu. This section describes changes that affect networking in &os;. The &man.epair.4; virtual Ethernet interface and the &man.lagg.4; pseudo interface now support VIMAGE kernel. A bug in the &man.epair.4; virtual Ethernet interface which could cause a panic when running &man.ifconfig.8; create and destory quickly has been fixed. &man.sysctl.3; variables in the &man.lagg.4; pseudo interface net.link.lagg.N.* have been removed in favor of per-interface &man.ifconfig.8; flags and options. ifconfig -v command shows them. Bugs in the &man.lagg.4; pseudo interface which could cause a system panic have been fixed. A bug in &man.pf.4; packet filter which could cause a rule with no log parameter to log the matched packet has been fixed. A bug in &os; IPv6 stack which did not invoke an LLENTRY_DELETED event when an L2 address was deleted from the link-level address table for IPv6. Obsolete APIs, SIOCGDRLST_IN6 and SIOCGPRLST_IN6 in &os; IPv6 stack have been removed.