1 <?xml version="1.0" encoding="iso-8859-1"?>
2 <!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
3 "http://www.FreeBSD.org/XML/share/xml/freebsd50.dtd" [
4 <!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN"
5 "http://www.FreeBSD.org/release/XML/share/xml/release.ent">
7 <!ENTITY % sponsor PUBLIC "-//FreeBSD//ENTITIES Sponsor Specification//EN"
8 "http://www.FreeBSD.org/release/XML/share/xml/sponsor.ent">
10 <!ENTITY % vendor PUBLIC "-//FreeBSD//ENTITIES Vendor Specification//EN"
11 "http://www.FreeBSD.org/release/XML/share/xml/vendor.ent">
13 <!ENTITY security PUBLIC "-//FreeBSD//ENTITIES Security Advisory List//EN"
14 "http://www.FreeBSD.org/release/XML/share/xml/security.xml">
15 <!ENTITY errata PUBLIC "-//FreeBSD//ENTITIES Errata List//EN"
16 "http://www.FreeBSD.org/release/XML/share/xml/errata.xml">
18 <article xmlns="http://docbook.org/ns/docbook"
19 xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0"
23 <title>&os; &release.current; Release Notes</title>
26 <orgname>The &os; Project</orgname>
29 <pubdate>$FreeBSD$</pubdate>
31 <!-- First rev: 285831 -->
32 <!-- Last rev: 284813 -->
36 <holder role="mailto:doc@FreeBSD.org">The &os; Documentation
40 <legalnotice xml:id="trademarks" role="trademarks">
50 <para>The release notes for &os; &release.current; contain
51 a summary of the changes made to the &os; base system on the
52 &release.branch; development line. This document lists
53 applicable security advisories that were issued since the last
54 release, as well as significant changes to the &os; kernel and
55 userland. Some brief remarks on upgrading are also
60 <sect1 xml:id="intro">
61 <title>Introduction</title>
63 <para>This document contains the release notes for &os;
64 &release.current;. It describes recently added, changed, or
65 deleted features of &os;. It also provides some notes on
66 upgrading from previous versions of &os;.</para>
68 <para releasetype="current">The &release.type; distribution to
69 which these release notes apply represents the latest point
70 along the &release.branch; development branch since
71 &release.branch; was created. Information regarding pre-built,
72 binary &release.type; distributions along this branch can be
74 xlink:href="&release.url;">&release.url;</uri>.</para>
76 <para releasetype="snapshot">The &release.type; distribution to
77 which these release notes apply represents a point along the
78 &release.branch; development branch between &release.prev; and
79 the future &release.next;. Information regarding pre-built,
80 binary &release.type; distributions along this branch can be
82 xlink:href="&release.url;">&release.url;</uri>.</para>
84 <para releasetype="release">This distribution of &os;
85 &release.current; is a &release.type; distribution. It can be
86 found at <uri xlink:href="&release.url;">&release.url;</uri> or
87 any of its mirrors. More information on obtaining this (or
88 other) &release.type; distributions of &os; can be found in the
90 xlink:href="&url.books.handbook;/mirrors.html"><quote>Obtaining
91 &os;</quote> appendix</link> to the <link
92 xlink:href="&url.books.handbook;/">&os;
93 Handbook</link>.</para>
95 <para>All users are encouraged to consult the release errata
96 before installing &os;. The errata document is updated with
97 <quote>late-breaking</quote> information discovered late in the
98 release cycle or after the release. Typically, it contains
99 information on known bugs, security advisories, and corrections
100 to documentation. An up-to-date copy of the errata for &os;
101 &release.current; can be found on the &os; Web site.</para>
103 <para>This document describes the most user-visible new or changed
104 features in &os; since &release.prev;.</para>
106 <para>Typical release note items document recent security
107 advisories issued after &release.prev;, new drivers or hardware
108 support, new commands or options, major bug fixes, or
109 contributed software upgrades. They may also list changes to
110 major ports/packages or release engineering practices. Clearly
111 the release notes cannot list every single change made to &os;
112 between releases; this document focuses primarily on security
113 advisories, user-visible changes, and major architectural
117 <sect1 xml:id="upgrade">
118 <title>Upgrading from Previous Releases of &os;</title>
120 <para arch="amd64,i386">Binary upgrades between RELEASE versions
121 (and snapshots of the various security branches) are supported
122 using the &man.freebsd-update.8; utility. The binary upgrade
123 procedure will update unmodified userland utilities, as well as
124 unmodified <filename>GENERIC</filename> kernel distributed as
125 a part of an official &os; release. The &man.freebsd-update.8;
126 utility requires that the host being upgraded have Internet
129 <para>Source-based upgrades (those based on recompiling the &os;
130 base system from source code) from previous versions are
131 supported, according to the instructions in
132 <filename>/usr/src/UPDATING</filename>.</para>
135 <para>Upgrading &os; should only be attempted after
136 backing up <emphasis>all</emphasis> data and configuration
141 <sect1 xml:id="security-errata">
142 <title>Security and Errata</title>
144 <para>This section lists the various Security Advisories and
145 Errata Notices since &release.prev;.</para>
147 <sect2 xml:id="security">
148 <title>Security Advisories</title>
153 <sect2 xml:id="errata">
154 <title>Errata Notices</title>
160 <sect1 xml:id="userland">
161 <title>Userland</title>
163 <para>This section covers changes and additions to userland
164 applications, contributed software, and system utilities.</para>
166 <sect2 xml:id="userland-config">
167 <title>Userland Configuration Changes</title>
172 <sect2 xml:id="userland-programs">
173 <title>Userland Application Changes</title>
175 <para revision="287326,288202" contrib="sponsor" sponsor="&ff;">The
176 &man.ar.1; utility now supports a <option>-D</option> flag to
177 prevent real mtime, uid, gid, and file mode values from being
178 inserted. This is called <quote>deterministic mode</quote>
179 and useful for making the resulting archives reproducible.
180 This behavior is enabled by default, and can be disabled by
181 specifying a <literal>-U</literal> flag.</para>
183 <para revision="286965">The &man.camcontrol.8;
184 <command>fwdownload</command> subcommand has been improved.
185 Changes include better support of SATA drives, downloading
186 firmaware to IBM LTO drives, <option>-q</option> flag to
187 suppress information output, and <command>opcodes</command>
188 subcommand to issue the <literal>REPORT SUPPORTED
189 OPCODES</literal> service action of the <literal>SCSI
190 MAINTENANCE IN</literal> command.</para>
192 <para revision="291774">The &man.cp.1; utility has been updated
193 to include a new flag, <literal>-s</literal>, which creates
194 a symbolic link to the specified source.</para>
196 <para revision="285929">A bug in &man.ctladm.8; utility which could
197 return a non-zero value even if it succeeds has been fixed.</para>
199 <para revision="286810" contrib="sponsor"
200 sponsor="&yandex;">The &man.ifconfig.8; utility now reports
201 SFP/SFP+ data when a <option>-v</option> flag is specified and
202 the NIC driver provides them.</para>
204 <para revision="286064">The &man.jail.8; utility has been
205 updated to include a new flag, <literal>-l</literal>, which
206 ensures a clean environment in the target jail when used.
207 Additionally, &man.jail.8; will run a shell within the target
208 jail when run no commands are specified.</para>
210 <para revision="286952">The &man.last.1; utility now supports
211 <literal>reboot</literal> as a pseudo-user name which prints
212 all system reboot entries (<literal>SHUTDOWN_TIME</literal>
213 and <literal>BOOT_TIME</literal> records). This was
214 accidentally removed as of &os; 9.0.</para>
216 <para revision="287027">The &man.mv.1; utility now returns
217 <literal>1</literal> instead of <literal>64</literal>
218 when more than two arguments are specified and
219 the target is not a valid directory.</para>
221 <para revision="287122">The &man.mkimg.1; utility has been
222 updated to include support for <literal>NTFS</literal>
223 filesystems in both <acronym>MBR</acronym> and
224 <acronym>GPT</acronym> partitioning schemes.</para>
226 <para revision="287122">A bug in the &man.mkimg.1; utility
227 which prevented dynamic VHD format from working with QEMU
228 has been fixed.</para>
230 <para revision="287746">The &man.pciconf.8; utility has been
231 updated to use the PCI ID database from the <filename
232 role="package">misc/pciids</filename> package, if present,
233 falling back to the PCI ID database in the &os; base
236 <para revision="288710" contrib="sponsor" sponsor="&gandi;">A
237 new utility, &man.sesutil.8;, has been added, which is used
238 to manage &man.ses.4; devices.</para>
240 <para revision="292231">Support for a
241 <option>-manage-gids</option> flag has been added to
242 &man.nfsuserd.8;. This option can be enabled at boot time by
243 setting an &man.rc.conf.5; variable
244 <varname>nfs_server_managegids</varname> to
245 <literal>YES</literal>.</para>
247 <para revision="287269">The &man.pkill.1; utility now supports
248 &man.jail.2; name in a <option>-j</option> option in addition to
249 &man.jail.2; ID.</para>
251 <para revision="287084"><command>userdel</command> and
252 <command>usermod</command> subcommand of the &man.pw.8; utility
253 now supports a <option>-y</option> flag.</para>
255 <para revision="292462" contrib="sponsor"
256 sponsor="&dellinc;">The resolver library has been updated to
257 reload <filename>/etc/resolv.conf</filename> if the
258 modification time has changed.</para>
260 <para revision="293744" contrib="sponsor" sponsor="&ff;">The
261 initial implementation of <quote>reroot</quote> support has
262 been added to the &man.reboot.8; utility, allowing the root
263 filesystem to be mounted from a temporary source filesystem
264 without requiring a full system reboot.</para>
266 <para revision="287392">The &man.timeout.1; utility has been
267 added. This utility runs a command with a time limit and is
268 compatible with <application>GNU timeout</application>.</para>
270 <para revision="287080">The &man.watchdogd.8; daemon now supports
271 a <option>-x <replaceable>exit_timeout</replaceable></option>
272 option to specify the timeout period in seconds to
273 leave in effect when the program exits.</para>
275 <para revision="287375">The &man.ypinit.8; script now supports
276 <filename>eui64</filename> NIS map file.</para>
279 <sect2 xml:id="userland-contrib">
280 <title>Contributed Software</title>
282 <para revision="286082">A bug in &man.libarchive.3; library which
283 could report an error when handling a sparse file entry
284 in a tar file has been fixed
285 by importing changeset <literal>bf4f6ec64e</literal>.</para>
287 <para revision="286751">Time zone database has been updated to
288 version <literal>2015f</literal>.</para>
290 <para revision="290152">The &man.file.1; utility has been
291 updated to version 5.25.</para>
293 <para revision="292588">The &man.xz.1; utility has been updated
294 to version 5.2.2, which provides support for multi-threaded
297 <para revision="293650">The &man.ntpd.8; utility has been
298 updated to version 4.2.8p5.</para>
300 <para revision="294190">The &man.unbound.8; utility has been
301 updated to version 1.5.7.</para>
303 <para revision="294286">The &man.less.1; utility has been
304 updated to version v481.</para>
306 <para revision="295690">The
307 <literal>unbound-control-setup</literal> script has been
308 removed from the base system.</para>
310 <para revision="295691">The &man.unbound.8; utility has been
311 updated to enable the <literal>insecure-lan-zones</literal>
312 option in preference of listing each <acronym>AS112</acronym>
313 zone individually.</para>
315 <para revision="296317">The <application>OpenSSL</application>
316 suite has been updated to version 1.0.1s.</para>
318 <para revision="296853">The <application>OpenSSH</application>
319 suite has been updated to version 7.2p2.</para>
322 <sect2 xml:id="userland-installer">
323 <title>Installation and Configuration Tools</title>
325 <para revision="295264" contrib="sponsor"
326 sponsor="&scaleengine;">The &man.bsdinstall.8; utility has
327 been updated to support <acronym>ZFS</acronym> installation
328 on <acronym>EFI</acronym>-based systems.</para>
331 <sect2 xml:id="userland-rc">
332 <title><filename class="directory">/etc/rc.d</filename>
335 <para revision="294680">The <literal>netwait</literal>
336 &man.rc.8; script has been updated to wait for network
337 interfaces that attach late in the boot process, such as some
338 <acronym>USB</acronym> network cards.</para>
340 <para revision="287091">Firewall rules set by
341 <literal>firewall_type="SIMPLE"</literal> now uses
342 &man.ipfw.4; <command>tables</command> for addresses to be
346 <sect2 xml:id="userland-periodic">
347 <title><filename class="directory">/etc/periodic</filename>
353 <sect2 xml:id="userland-libraries">
354 <title>Runtime Libraries and API</title>
359 <sect2 xml:id="userland-abi">
360 <title>ABI Compatibility</title>
366 <sect1 xml:id="kernel">
367 <title>Kernel</title>
369 <para>This section covers changes to kernel configurations, system
370 tuning, and system control parameters that are not otherwise
373 <para revision="286742">The &man.vt.4; terminal console driver now
374 supports <option>ALT_BREAK_TO_DEBUGGER</option> and
375 <varname>debug.kdb.alt_break_to_debugger</varname> sysctl
376 variable when kernel debugger support (<option>options
377 KDB</option>) is enabled.</para>
379 <para revision="286843">A <function>thread_create()</function>
380 function has been added as an API to create userspace thread in
383 <sect2 xml:id="kernel-bugfix">
384 <title>Kernel Bug Fixes</title>
386 <para revision="288167" contrib="sponsor"
387 sponsor="&multiplay;">The &man.kqueue.2; system call has been
388 updated to handle write events to files larger than 2
392 <sect2 xml:id="kernel-config">
393 <title>Kernel Configuration</title>
395 <para revision="286132" contrib="sponsor"
396 sponsor="&ff;" arch="amd64,i386">The &man.pms.4; driver
397 has been removed from
398 <filename>GENERIC</filename> kernel.</para>
401 <sect2 xml:id="kernel-sysctl">
402 <title>System Tuning and Controls</title>
404 <para revision="287438">A &man.sysctl.3; variable
405 <varname>kern.features.invariants</varname> has been added.
406 It shows if the kernel is compiled with <option>INVARIANTS</option>
409 <para revision="286322" contrib="sponsor"
410 sponsor="&ff;">A bug which could prevent a loader
411 tunable <varname>kern.racct.enable</varname> from working
412 has been fixed.</para>
416 <sect1 xml:id="drivers">
417 <title>Devices and Drivers</title>
419 <para>This section covers changes and additions to devices and
420 device drivers since &release.prev;.</para>
422 <sect2 xml:id="drivers-device">
423 <title>Device Drivers</title>
425 <para revision="287079" arch="arm">The <literal>imxwdt</literal>
426 driver, which supports Freescale i.MX watchdog, has been
429 <para revision="287037">A bug in the &man.uart.4; driver which
430 could cause a polarity reversal of PPS (Pulse Per Second)
431 capture events has been fixed. The trailing edge of a
432 positive PPS pulse and the leading edge of the next pulse were
433 used as "assert" and "clear" event respectively.</para>
435 <para revision="287037">The &man.uart.4; driver now supports
436 runtime configuration of PPS signal source captured by the
437 driver via <varname>dev.uart.pps_mode</varname> and
438 <varname>dev.uart.<replaceable>0</replaceable>.pps_mode</varname>
439 sysctl variables. The values <literal>0</literal>,
440 <literal>1</literal>, and <literal>2</literal> correspond to
441 disabled, capturing pulses on the CTS line,
442 and capturing pulses on the DCD line, respectively.
443 The default value is <literal>2</literal>.</para>
445 <para revision="287035">The &man.uftdi.4; driver now supports
446 <varname>UFTDIIOC_READ_EEPROM</varname>,
447 <varname>UFTDIIOC_WRITE_EEPROM</varname>,
448 and <varname>UFTDIIOC_ERASE_EEPROM</varname>
450 read/write serial EEPROM attached to the controller chip.</para>
453 <sect2 xml:id="drivers-storage">
454 <title>Storage Drivers</title>
456 <para revision="280451">Legacy &man.ata.4; drivers such as
457 <literal>ataahci</literal>, <literal>ataadaptec</literal>,
458 and <literal>mv_sata</literal> have been removed in favor of
459 the new drivers such as &man.ahci.4;, &man.siis.4;, and
462 <para revision="288732" contrib="sponsor" sponsor="&ix;">The
463 <acronym>CTL</acronym> High Availability implementation has
464 been rewritten.</para>
466 <para revision="288810">The &man.ctl.4; driver has been updated
467 to support CD-ROM and removable devices.</para>
469 <para contrib="sponsor" sponsor="&ix;">The &man.isp.4; driver has
470 been updated and improved: added support for 16Gbps FC cards,
471 improved target mode support, completed Multi-ID (NPIV)
472 functionality.</para>
475 <sect2 xml:id="drivers-network">
476 <title>Network Drivers</title>
478 <para revision="295524" contrib="sponsor"
479 sponsor="&limelight;, &intelcorp;">The &man.ixgbe.4; driver
480 has been updated to version 3.1.13-k.</para>
482 <para revision="286895">Firmwares for model T4 and T5 bundled
483 with the &man.cxgbe.4; driver have been updated to
484 version 1.14.4.0.</para>
488 <sect1 xml:id="hardware">
489 <title>Hardware Support</title>
491 <para>This section covers general hardware support for physical
492 machines, hypervisors, and virtualization environments, as well
493 as hardware changes and updates that do not otherwise fit in
494 other sections of this document.</para>
496 <sect2 xml:id="hardware-support">
497 <title>Hardware Support</title>
499 <para revision="293675">The &man.ismt.4; driver has been added,
500 providing support for recent &intel; SMBus 2.0
504 <sect2 xml:id="hardware-virtualization">
505 <title>Virtualization Support</title>
507 <para revision="287802">The &man.xen.4; driver has been updated
508 to include support for <literal>blkif</literal> indirect
512 <sect2 xml:id="hardware-arm">
513 <title>ARM Support</title>
519 <sect1 xml:id="storage">
520 <title>Storage</title>
522 <para>This section covers changes and additions to file systems
523 and other storage subsystems, both local and networked.</para>
525 <sect2 xml:id="storage-general">
526 <title>General Storage</title>
531 <sect2 xml:id="storage-net">
532 <title>Networked Storage</title>
537 <sect2 xml:id="storage-zfs">
540 <para revision="287665" contrib="sponsor"
541 sponsor="&clusterhq;">The &man.zfs.8; <literal>l2arc</literal>
542 code has been updated to take <literal>ashift</literal> into
543 account when gathering buffers to be written to the
544 <literal>l2arc</literal> device.</para>
547 <sect2 xml:id="storage-geom">
548 <title>&man.geom.4;</title>
554 <sect1 xml:id="boot">
555 <title>Boot Loader Changes</title>
557 <para>This section covers the boot loader, boot menu, and other
558 boot-related changes.</para>
560 <sect2 xml:id="boot-loader">
561 <title>Boot Loader Changes</title>
563 <para revision="294445">Initial terminal emulation support has
564 been added to <filename>loader.efi</filename> for
565 <acronym>UEFI</acronym>-based systems.</para>
567 <para revision="294999" contrib="sponsor"
568 sponsor="&multiplay;">Initial <acronym>ZFS</acronym> boot
569 support has been added to the <acronym>EFI</acronym>
570 implementation.</para>
572 <para revision="295475" contrib="sponsor"
573 sponsor="&scaleengine;">The <acronym>UEFI</acronym> loader has
574 been updated to support multiple <acronym>ZFS</acronym> boot
575 environments, such as those provided by <filename
576 role="package">sysutils/beadm</filename>.</para>
579 <sect2 xml:id="boot-menu">
580 <title>Boot Menu Changes</title>
582 <para revision="294446">The <acronym>UEFI</acronym> boot menu
583 has been updated to enable the <quote>Beastie</quote> menu,
584 similiar to the traditional &man.sc.4; boot menu.</para>
588 <sect1 xml:id="network">
589 <title>Networking</title>
591 <para>This section describes changes that affect networking in
594 <para revision="286125" contrib="sponsor"
595 sponsor="&netgate;">A bug in &man.pf.4; packet filter which
596 could cause a rule with no <literal>log</literal> parameter to
597 log the matched packet has been fixed.</para>
599 <para revision="286316">A bug in &os; IPv6 stack which did not
600 invoke an <literal>LLENTRY_DELETED</literal> event when an L2
601 address was deleted from the link-level address table for
604 <sect2 xml:id="network-protocols">
605 <title>Network Protocols</title>
611 <sect1 xml:id="ports">
612 <title>Ports Collection and Package Infrastructure</title>
614 <para>This section covers changes to the &os; Ports
615 Collection, package infrastructure, and package maintenance and
616 installation tools.</para>
618 <sect2 xml:id="ports-infrastructure">
619 <title>Infrastructure Changes</title>
624 <sect2 xml:id="ports-packages ">
625 <title>Packaging Changes</title>
632 <title>Documentation</title>
634 <para>This section covers changes to the &os; Documentation
635 Project sources and toolchain.</para>
637 <sect2 xml:id="doc-sources">
638 <title>Documentation Source Changes</title>
643 <sect2 xml:id="doc-toolchain">
644 <title>Documentation Toolchain Changes</title>
650 <sect1 xml:id="releng">
651 <title>Release Engineering and Integration</title>
653 <para>This section covers changes that are specific to the
654 &os; Release Engineering processes.</para>
656 <sect2 xml:id="releng-changes">
657 <title>Integration Changes</title>