1 <?xml version="1.0" encoding="iso-8859-1"?>
2 <!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
3 "http://www.FreeBSD.org/XML/share/xml/freebsd50.dtd" [
4 <!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN"
5 "http://www.FreeBSD.org/release/XML/share/xml/release.ent">
7 <!ENTITY % sponsor PUBLIC "-//FreeBSD//ENTITIES Sponsor Specification//EN"
8 "http://www.FreeBSD.org/release/XML/share/xml/sponsor.ent">
10 <!ENTITY % vendor PUBLIC "-//FreeBSD//ENTITIES Vendor Specification//EN"
11 "http://www.FreeBSD.org/release/XML/share/xml/vendor.ent">
13 <!ENTITY security PUBLIC "-//FreeBSD//ENTITIES Security Advisory List//EN"
14 "http://www.FreeBSD.org/release/XML/share/xml/security.xml">
15 <!ENTITY errata PUBLIC "-//FreeBSD//ENTITIES Errata List//EN"
16 "http://www.FreeBSD.org/release/XML/share/xml/errata.xml">
18 <article xmlns="http://docbook.org/ns/docbook"
19 xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0"
23 <title>&os; &release.current; Release Notes</title>
26 <orgname>The &os; Project</orgname>
29 <pubdate>$FreeBSD$</pubdate>
31 <!-- First rev: 285831 -->
32 <!-- Last rev: 284813 -->
36 <holder role="mailto:doc@FreeBSD.org">The &os; Documentation
40 <legalnotice xml:id="trademarks" role="trademarks">
50 <para>The release notes for &os; &release.current; contain
51 a summary of the changes made to the &os; base system on the
52 &release.branch; development line. This document lists
53 applicable security advisories that were issued since the last
54 release, as well as significant changes to the &os; kernel and
55 userland. Some brief remarks on upgrading are also
60 <sect1 xml:id="intro">
61 <title>Introduction</title>
63 <para>This document contains the release notes for &os;
64 &release.current;. It describes recently added, changed, or
65 deleted features of &os;. It also provides some notes on
66 upgrading from previous versions of &os;.</para>
68 <para releasetype="current">The &release.type; distribution to
69 which these release notes apply represents the latest point
70 along the &release.branch; development branch since
71 &release.branch; was created. Information regarding pre-built,
72 binary &release.type; distributions along this branch can be
74 xlink:href="&release.url;">&release.url;</uri>.</para>
76 <para releasetype="snapshot">The &release.type; distribution to
77 which these release notes apply represents a point along the
78 &release.branch; development branch between &release.prev; and
79 the future &release.next;. Information regarding pre-built,
80 binary &release.type; distributions along this branch can be
82 xlink:href="&release.url;">&release.url;</uri>.</para>
84 <para releasetype="release">This distribution of &os;
85 &release.current; is a &release.type; distribution. It can be
86 found at <uri xlink:href="&release.url;">&release.url;</uri> or
87 any of its mirrors. More information on obtaining this (or
88 other) &release.type; distributions of &os; can be found in the
90 xlink:href="&url.books.handbook;/mirrors.html"><quote>Obtaining
91 &os;</quote> appendix</link> to the <link
92 xlink:href="&url.books.handbook;/">&os;
93 Handbook</link>.</para>
95 <para>All users are encouraged to consult the release errata
96 before installing &os;. The errata document is updated with
97 <quote>late-breaking</quote> information discovered late in the
98 release cycle or after the release. Typically, it contains
99 information on known bugs, security advisories, and corrections
100 to documentation. An up-to-date copy of the errata for &os;
101 &release.current; can be found on the &os; Web site.</para>
103 <para>This document describes the most user-visible new or changed
104 features in &os; since &release.prev;.</para>
106 <para>Typical release note items document recent security
107 advisories issued after &release.prev;, new drivers or hardware
108 support, new commands or options, major bug fixes, or
109 contributed software upgrades. They may also list changes to
110 major ports/packages or release engineering practices. Clearly
111 the release notes cannot list every single change made to &os;
112 between releases; this document focuses primarily on security
113 advisories, user-visible changes, and major architectural
117 <sect1 xml:id="upgrade">
118 <title>Upgrading from Previous Releases of &os;</title>
120 <para arch="amd64,i386">Binary upgrades between RELEASE versions
121 (and snapshots of the various security branches) are supported
122 using the &man.freebsd-update.8; utility. The binary upgrade
123 procedure will update unmodified userland utilities, as well as
124 unmodified <filename>GENERIC</filename> kernel distributed as
125 a part of an official &os; release. The &man.freebsd-update.8;
126 utility requires that the host being upgraded have Internet
129 <para>Source-based upgrades (those based on recompiling the &os;
130 base system from source code) from previous versions are
131 supported, according to the instructions in
132 <filename>/usr/src/UPDATING</filename>.</para>
135 <para>Upgrading &os; should only be attempted after
136 backing up <emphasis>all</emphasis> data and configuration
141 <sect1 xml:id="security-errata">
142 <title>Security and Errata</title>
144 <para>This section lists the various Security Advisories and
145 Errata Notices since &release.prev;.</para>
147 <sect2 xml:id="security">
148 <title>Security Advisories</title>
153 <sect2 xml:id="errata">
154 <title>Errata Notices</title>
160 <sect1 xml:id="userland">
161 <title>Userland</title>
163 <para>This section covers changes and additions to userland
164 applications, contributed software, and system utilities.</para>
166 <sect2 xml:id="userland-config">
167 <title>Userland Configuration Changes</title>
172 <sect2 xml:id="userland-programs">
173 <title>Userland Application Changes</title>
175 <para revision="287326,288202" contrib="sponsor" sponsor="&ff;">The
176 &man.ar.1; utility now supports a <option>-D</option> flag to
177 prevent real mtime, uid, gid, and file mode values from being
178 inserted. This is called <quote>deterministic mode</quote>
179 and useful for making the resulting archives reproducible.
180 This behavior is enabled by default, and can be disabled by
181 specifying a <literal>-U</literal> flag.</para>
183 <para revision="286965">The &man.camcontrol.8;
184 <command>fwdownload</command> subcommand has been improved.
185 Changes include better support of SATA drives, downloading
186 firmaware to IBM LTO drives, <option>-q</option> flag to
187 suppress information output, and <command>opcodes</command>
188 subcommand to issue the <literal>REPORT SUPPORTED
189 OPCODES</literal> service action of the <literal>SCSI
190 MAINTENANCE IN</literal> command.</para>
192 <para revision="291774">The &man.cp.1; utility has been updated
193 to include a new flag, <literal>-s</literal>, which creates
194 a symbolic link to the specified source.</para>
196 <para revision="285929">A bug in the &man.ctladm.8; utility
197 which could return a non-zero value even if it succeeds has
200 <para revision="288185">A bug in the &man.grdc.6; program which
201 caused a wrong display in the 12-hour mode has been
204 <para revision="286810" contrib="sponsor"
205 sponsor="&yandex;">The &man.ifconfig.8; utility now reports
206 SFP/SFP+ data when a <option>-v</option> flag is specified and
207 the NIC driver provides them.</para>
209 <para revision="288048">Bugs in the &man.inetd.8; daemon which
210 could cause a crash when an RPC entry is defined and an IPv6
211 address is specified in <varname>-a</varname> flag have been
214 <para revision="286064">The &man.jail.8; utility has been
215 updated to include a new flag, <literal>-l</literal>, which
216 ensures a clean environment in the target jail when used.
217 Additionally, &man.jail.8; will run a shell within the target
218 jail when run no commands are specified.</para>
220 <para revision="286952">The &man.last.1; utility now supports
221 <literal>reboot</literal> as a pseudo-user name which prints
222 all system reboot entries (<literal>SHUTDOWN_TIME</literal>
223 and <literal>BOOT_TIME</literal> records). This was
224 accidentally removed as of &os; 9.0.</para>
226 <para revision="287027">The &man.mv.1; utility now returns
227 <literal>1</literal> instead of <literal>64</literal>
228 when more than two arguments are specified and
229 the target is not a valid directory.</para>
231 <para revision="287122">The &man.mkimg.1; utility has been
232 updated to include support for <literal>NTFS</literal>
233 filesystems in both <acronym>MBR</acronym> and
234 <acronym>GPT</acronym> partitioning schemes.</para>
236 <para revision="287122">A bug in the &man.mkimg.1; utility
237 which prevented dynamic VHD format from working with QEMU
238 has been fixed.</para>
240 <para revision="287593">A bug in the &man.netstat.1; utility
241 which showed the statistics in the number of packets divided
242 by 1024, not 1000 has been fixed.</para>
244 <para revision="287746">The &man.pciconf.8; utility has been
245 updated to use the PCI ID database from the <filename
246 role="package">misc/pciids</filename> package, if present,
247 falling back to the PCI ID database in the &os; base
250 <para revision="288710" contrib="sponsor" sponsor="&gandi;">A
251 new utility, &man.sesutil.8;, has been added, which is used
252 to manage &man.ses.4; devices.</para>
254 <para revision="292231">Support for a
255 <option>-manage-gids</option> flag has been added to
256 &man.nfsuserd.8;. This option can be enabled at boot time by
257 setting an &man.rc.conf.5; variable
258 <varname>nfs_server_managegids</varname> to
259 <literal>YES</literal>.</para>
261 <para revision="287269">The &man.pkill.1; utility now supports
262 &man.jail.2; name in a <option>-j</option> option in addition to
263 &man.jail.2; ID.</para>
265 <para revision="287084"><command>userdel</command> and
266 <command>usermod</command> subcommand of the &man.pw.8; utility
267 now supports a <option>-y</option> flag.</para>
269 <para revision="292462" contrib="sponsor"
270 sponsor="&dellinc;">The resolver library has been updated to
271 reload <filename>/etc/resolv.conf</filename> if the
272 modification time has changed.</para>
274 <para revision="293744" contrib="sponsor" sponsor="&ff;">The
275 initial implementation of <quote>reroot</quote> support has
276 been added to the &man.reboot.8; utility, allowing the root
277 filesystem to be mounted from a temporary source filesystem
278 without requiring a full system reboot.</para>
280 <para revision="287392">The &man.timeout.1; utility has been
281 added. This utility runs a command with a time limit and is
282 compatible with <application>GNU timeout</application>.</para>
284 <para revision="287080">The &man.watchdogd.8; daemon now supports
285 a <option>-x <replaceable>exit_timeout</replaceable></option>
286 option to specify the timeout period in seconds to
287 leave in effect when the program exits.</para>
289 <para revision="287375">The &man.ypinit.8; script now supports
290 <filename>eui64</filename> NIS map file.</para>
293 <sect2 xml:id="userland-contrib">
294 <title>Contributed Software</title>
296 <para revision="286082">A bug in &man.libarchive.3; library which
297 could report an error when handling a sparse file entry
298 in a tar file has been fixed
299 by importing changeset <literal>bf4f6ec64e</literal>.</para>
301 <para revision="286751">Time zone database has been updated to
302 version <literal>2015f</literal>.</para>
304 <para revision="290152">The &man.file.1; utility has been
305 updated to version 5.25.</para>
307 <para revision="292588">The &man.xz.1; utility has been updated
308 to version 5.2.2, which provides support for multi-threaded
311 <para revision="293650">The &man.ntpd.8; utility has been
312 updated to version 4.2.8p5.</para>
314 <para revision="294190">The &man.unbound.8; utility has been
315 updated to version 1.5.7.</para>
317 <para revision="294286">The &man.less.1; utility has been
318 updated to version v481.</para>
320 <para revision="295690">The
321 <literal>unbound-control-setup</literal> script has been
322 removed from the base system.</para>
324 <para revision="295691">The &man.unbound.8; utility has been
325 updated to enable the <literal>insecure-lan-zones</literal>
326 option in preference of listing each <acronym>AS112</acronym>
327 zone individually.</para>
329 <para revision="296317">The <application>OpenSSL</application>
330 suite has been updated to version 1.0.1s.</para>
332 <para revision="296853">The <application>OpenSSH</application>
333 suite has been updated to version 7.2p2.</para>
336 <sect2 xml:id="userland-installer">
337 <title>Installation and Configuration Tools</title>
339 <para revision="295264" contrib="sponsor"
340 sponsor="&scaleengine;">The &man.bsdinstall.8; utility has
341 been updated to support <acronym>ZFS</acronym> installation
342 on <acronym>EFI</acronym>-based systems.</para>
345 <sect2 xml:id="userland-rc">
346 <title><filename class="directory">/etc/rc.d</filename>
349 <para revision="294680">The <filename>rc.d/netwait</filename>
350 script has been updated to wait for network
351 interfaces that attach late in the boot process, such as some
352 <acronym>USB</acronym> network cards.</para>
354 <para revision="287091">Firewall rules set by
355 <literal>firewall_type="SIMPLE"</literal> now uses
356 &man.ipfw.4; <command>tables</command> for addresses to be
359 <para revision="287737">The <filename>rc.d/netif</filename>
360 script now updates only static routes when an interface
364 <sect2 xml:id="userland-periodic">
365 <title><filename class="directory">/etc/periodic</filename>
371 <sect2 xml:id="userland-libraries">
372 <title>Runtime Libraries and API</title>
377 <sect2 xml:id="userland-abi">
378 <title>ABI Compatibility</title>
384 <sect1 xml:id="kernel">
385 <title>Kernel</title>
387 <para>This section covers changes to kernel configurations, system
388 tuning, and system control parameters that are not otherwise
391 <para revision="286742">The &man.vt.4; terminal console driver now
392 supports <option>ALT_BREAK_TO_DEBUGGER</option> and
393 <varname>debug.kdb.alt_break_to_debugger</varname> sysctl
394 variable when kernel debugger support (<option>options
395 KDB</option>) is enabled.</para>
397 <para revision="287782">The &man.vt.4; terminal console driver now
398 supports <varname>kern.vt.bell_enable</varname> sysctl variable
399 to enable or disable terminal bell. The default is
400 <literal>1</literal> (enabled).</para>
402 <para revision="286843">A <function>thread_create()</function>
403 function has been added as an API to create userspace thread in
406 <sect2 xml:id="kernel-bugfix">
407 <title>Kernel Bug Fixes</title>
409 <para revision="288167" contrib="sponsor"
410 sponsor="&multiplay;">The &man.kqueue.2; system call has been
411 updated to handle write events to files larger than 2
415 <sect2 xml:id="kernel-config">
416 <title>Kernel Configuration</title>
418 <para revision="286132" contrib="sponsor"
419 sponsor="&ff;" arch="amd64,i386">The &man.pms.4; driver
420 has been removed from
421 <filename>GENERIC</filename> kernel.</para>
424 <sect2 xml:id="kernel-sysctl">
425 <title>System Tuning and Controls</title>
427 <para revision="287438">A &man.sysctl.3; variable
428 <varname>kern.features.invariants</varname> has been added.
429 It shows if the kernel is compiled with <option>INVARIANTS</option>
432 <para revision="286322" contrib="sponsor"
433 sponsor="&ff;">A bug which could prevent a loader
434 tunable <varname>kern.racct.enable</varname> from working
435 has been fixed.</para>
439 <sect1 xml:id="drivers">
440 <title>Devices and Drivers</title>
442 <para>This section covers changes and additions to devices and
443 device drivers since &release.prev;.</para>
445 <sect2 xml:id="drivers-device">
446 <title>Device Drivers</title>
448 <para revision="287079" arch="arm">The <literal>imxwdt</literal>
449 driver, which supports Freescale i.MX watchdog, has been
452 <para revision="287926">The &man.puc.4; driver now supports MSI
453 interrupts and prefers it to the legacy interrupts. This
454 behavior can be disabled by setting
455 <varname>hw.puc.msi_disable</varname> loader tunable.</para>
457 <para revision="287037">A bug in the &man.uart.4; driver which
458 could cause a polarity reversal of PPS (Pulse Per Second)
459 capture events has been fixed. The trailing edge of a
460 positive PPS pulse and the leading edge of the next pulse were
461 used as "assert" and "clear" event respectively.</para>
463 <para revision="287037">The &man.uart.4; driver now supports
464 runtime configuration of PPS signal source captured by the
465 driver via <varname>dev.uart.pps_mode</varname> and
466 <varname>dev.uart.<replaceable>0</replaceable>.pps_mode</varname>
467 sysctl variables. The values <literal>0</literal>,
468 <literal>1</literal>, and <literal>2</literal> correspond to
469 disabled, capturing pulses on the CTS line,
470 and capturing pulses on the DCD line, respectively.
471 The default value is <literal>2</literal>.</para>
473 <para revision="287035">The &man.uftdi.4; driver now supports
474 <varname>UFTDIIOC_READ_EEPROM</varname>,
475 <varname>UFTDIIOC_WRITE_EEPROM</varname>,
476 and <varname>UFTDIIOC_ERASE_EEPROM</varname>
478 read/write serial EEPROM attached to the controller chip.</para>
481 <sect2 xml:id="drivers-storage">
482 <title>Storage Drivers</title>
484 <para revision="280451">Legacy &man.ata.4; drivers such as
485 <literal>ataahci</literal>, <literal>ataadaptec</literal>,
486 and <literal>mv_sata</literal> have been removed in favor of
487 the new drivers such as &man.ahci.4;, &man.siis.4;, and
490 <para revision="288732" contrib="sponsor" sponsor="&ix;">The
491 <acronym>CTL</acronym> High Availability implementation has
492 been rewritten.</para>
494 <para revision="288810">The &man.ctl.4; driver has been updated
495 to support CD-ROM and removable devices.</para>
497 <para contrib="sponsor" sponsor="&ix;">The &man.isp.4; driver has
498 been updated and improved: added support for 16Gbps FC cards,
499 improved target mode support, completed Multi-ID (NPIV)
500 functionality.</para>
503 <sect2 xml:id="drivers-network">
504 <title>Network Drivers</title>
506 <para revision="295524" contrib="sponsor"
507 sponsor="&limelight;, &intelcorp;">The &man.ixgbe.4; driver
508 has been updated to version 3.1.13-k.</para>
510 <para revision="286895">Firmwares for model T4 and T5 bundled
511 with the &man.cxgbe.4; driver have been updated to
512 version 1.14.4.0.</para>
516 <sect1 xml:id="hardware">
517 <title>Hardware Support</title>
519 <para>This section covers general hardware support for physical
520 machines, hypervisors, and virtualization environments, as well
521 as hardware changes and updates that do not otherwise fit in
522 other sections of this document.</para>
524 <sect2 xml:id="hardware-support">
525 <title>Hardware Support</title>
527 <para revision="293675">The &man.ismt.4; driver has been added,
528 providing support for recent &intel; SMBus 2.0
532 <sect2 xml:id="hardware-virtualization">
533 <title>Virtualization Support</title>
535 <para revision="287802">The &man.xen.4; driver has been updated
536 to include support for <literal>blkif</literal> indirect
540 <sect2 xml:id="hardware-arm">
541 <title>ARM Support</title>
547 <sect1 xml:id="storage">
548 <title>Storage</title>
550 <para>This section covers changes and additions to file systems
551 and other storage subsystems, both local and networked.</para>
553 <sect2 xml:id="storage-general">
554 <title>General Storage</title>
559 <sect2 xml:id="storage-net">
560 <title>Networked Storage</title>
565 <sect2 xml:id="storage-zfs">
568 <para revision="287665" contrib="sponsor"
569 sponsor="&clusterhq;">The &man.zfs.8; <literal>l2arc</literal>
570 code has been updated to take <literal>ashift</literal> into
571 account when gathering buffers to be written to the
572 <literal>l2arc</literal> device.</para>
575 <sect2 xml:id="storage-geom">
576 <title>&man.geom.4;</title>
582 <sect1 xml:id="boot">
583 <title>Boot Loader Changes</title>
585 <para>This section covers the boot loader, boot menu, and other
586 boot-related changes.</para>
588 <sect2 xml:id="boot-loader">
589 <title>Boot Loader Changes</title>
591 <para revision="294445">Initial terminal emulation support has
592 been added to <filename>loader.efi</filename> for
593 <acronym>UEFI</acronym>-based systems.</para>
595 <para revision="294999" contrib="sponsor"
596 sponsor="&multiplay;">Initial <acronym>ZFS</acronym> boot
597 support has been added to the <acronym>EFI</acronym>
598 implementation.</para>
600 <para revision="295475" contrib="sponsor"
601 sponsor="&scaleengine;">The <acronym>UEFI</acronym> loader has
602 been updated to support multiple <acronym>ZFS</acronym> boot
603 environments, such as those provided by <filename
604 role="package">sysutils/beadm</filename>.</para>
607 <sect2 xml:id="boot-menu">
608 <title>Boot Menu Changes</title>
610 <para revision="294446">The <acronym>UEFI</acronym> boot menu
611 has been updated to enable the <quote>Beastie</quote> menu,
612 similiar to the traditional &man.sc.4; boot menu.</para>
616 <sect1 xml:id="network">
617 <title>Networking</title>
619 <para>This section describes changes that affect networking in
622 <para revision="287594,287723">The &man.epair.4; virtual
623 Ethernet interface and the &man.lagg.4; pseudo interface now
624 support <filename>VIMAGE</filename> kernel.</para>
626 <para revision="287594">A bug in the &man.epair.4; virtual
627 Ethernet interface which could cause a panic when running
628 &man.ifconfig.8; <command>create</command> and
629 <command>destory</command> quickly has been fixed.</para>
631 <para revision="287723">&man.sysctl.3; variables in the
632 &man.lagg.4; pseudo interface
633 <varname>net.link.lagg.<replaceable>N</replaceable>.<replaceable>*</replaceable></varname>
634 have been removed in favor of per-interface &man.ifconfig.8;
635 flags and options. <command>ifconfig -v</command>
636 command shows them.</para>
638 <para revision="287723">Bugs in the
639 &man.lagg.4; pseudo interface which could cause a system
640 panic have been fixed.</para>
642 <para revision="286125" contrib="sponsor"
643 sponsor="&netgate;">A bug in &man.pf.4; packet filter which
644 could cause a rule with no <literal>log</literal> parameter to
645 log the matched packet has been fixed.</para>
647 <para revision="286316">A bug in &os; IPv6 stack which did not
648 invoke an <literal>LLENTRY_DELETED</literal> event when an L2
649 address was deleted from the link-level address table for
652 <para revision="287733">Obsolete APIs,
653 <literal>SIOCGDRLST_IN6</literal> and
654 <literal>SIOCGPRLST_IN6</literal> in &os; IPv6 stack have been
657 <sect2 xml:id="network-protocols">
658 <title>Network Protocols</title>
664 <sect1 xml:id="ports">
665 <title>Ports Collection and Package Infrastructure</title>
667 <para>This section covers changes to the &os; Ports
668 Collection, package infrastructure, and package maintenance and
669 installation tools.</para>
671 <sect2 xml:id="ports-infrastructure">
672 <title>Infrastructure Changes</title>
677 <sect2 xml:id="ports-packages ">
678 <title>Packaging Changes</title>
685 <title>Documentation</title>
687 <para>This section covers changes to the &os; Documentation
688 Project sources and toolchain.</para>
690 <sect2 xml:id="doc-sources">
691 <title>Documentation Source Changes</title>
696 <sect2 xml:id="doc-toolchain">
697 <title>Documentation Toolchain Changes</title>
703 <sect1 xml:id="releng">
704 <title>Release Engineering and Integration</title>
706 <para>This section covers changes that are specific to the
707 &os; Release Engineering processes.</para>
709 <sect2 xml:id="releng-changes">
710 <title>Integration Changes</title>