release/doc/en_US.ISO8859-1/relnotes/article.sgml

   1 <!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook V4.1-Based Extension//EN" [
   2 <!ENTITY % articles.ent PUBLIC "-//FreeBSD//ENTITIES DocBook FreeBSD Articles Entity Set//EN">
   3 %articles.ent;
   4
   5 <!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN">
   6 %release;
   7 ]>
   8
   9 <article>
  10   <articleinfo>
  11     <title>&os; &release.current; Release Notes</title>
  12
  13     <corpauthor>The &os; Project</corpauthor>
  14
  15     <pubdate>$FreeBSD$</pubdate>
  16
  17     <copyright>
  18       <year>2000</year>
  19       <year>2001</year>
  20       <year>2002</year>
  21       <year>2003</year>
  22       <year>2004</year>
  23       <year>2005</year>
  24       <year>2006</year>
  25       <year>2007</year>
  26       <year>2008</year>
  27       <year>2009</year>
  28       <holder role="mailto:doc@FreeBSD.org">The &os; Documentation Project</holder>
  29     </copyright>
  30
  31     <legalnotice id="trademarks" role="trademarks">
  32       &tm-attrib.freebsd;
  33       &tm-attrib.ibm;
  34       &tm-attrib.ieee;
  35       &tm-attrib.intel;
  36       &tm-attrib.sparc;
  37       &tm-attrib.general;
  38     </legalnotice>
  39
  40     <abstract>
  41       <para>The release notes for &os; &release.current; contain a summary
  42         of the changes made to the &os; base system on the
  43         &release.branch; development line.
  44         This document lists applicable security advisories that were issued since
  45         the last release, as well as significant changes to the &os;
  46         kernel and userland.
  47         Some brief remarks on upgrading are also presented.</para>
  48     </abstract>
  49   </articleinfo>
  50
  51   <sect1 id="intro">
  52     <title>Introduction</title>
  53
  54     <para>This document contains the release notes for &os;
  55       &release.current;.  It
  56       describes recently added, changed, or deleted features of &os;.
  57       It also provides some notes on upgrading
  58       from previous versions of &os;.</para>
  59
  60 <![ %release.type.current [
  61
  62     <para>The &release.type; distribution to which these release notes
  63       apply represents the latest point along the &release.branch; development
  64       branch since &release.branch; was created.  Information regarding pre-built, binary
  65       &release.type; distributions along this branch
  66       can be found at <ulink url="&release.url;"></ulink>.</para>
  67
  68 ]]>
  69
  70 <![ %release.type.snapshot [
  71
  72     <para>The &release.type; distribution to which these release notes
  73       apply represents a point along the &release.branch; development
  74       branch between &release.prev; and the future &release.next;.
  75       Information regarding
  76       pre-built, binary &release.type; distributions along this branch
  77       can be found at <ulink url="&release.url;"></ulink>.</para>
  78
  79 ]]>
  80
  81 <![ %release.type.release [
  82
  83     <para>This distribution of &os; &release.current; is a
  84       &release.type; distribution.  It can be found at <ulink
  85       url="&release.url;"></ulink> or any of its mirrors.  More
  86       information on obtaining this (or other) &release.type;
  87       distributions of &os; can be found in the <ulink
  88       url="&url.books.handbook;/mirrors.html"><quote>Obtaining
  89       &os;</quote> appendix</ulink> to the <ulink
  90       url="&url.books.handbook;/">&os; Handbook</ulink>.</para>
  91
  92 ]]>
  93
  94     <para>All users are encouraged to consult the release errata before
  95       installing &os;.  The errata document is updated with
  96       <quote>late-breaking</quote> information discovered late in the
  97       release cycle or after the release.  Typically, it contains
  98       information on known bugs, security advisories, and corrections to
  99       documentation.  An up-to-date copy of the errata for &os;
 100       &release.current; can be found on the &os; Web site.</para>
 101   </sect1>
 102
 103   <sect1 id="new">
 104     <title>What's New</title>
 105
 106     <para>This section describes the most user-visible new or changed
 107       features in &os; since &release.prev;.</para>
 108
 109     <para>Typical release note items document recent security
 110       advisories issued after &release.prev;, new drivers or hardware
 111       support, new commands or options, major bug fixes, or
 112       contributed software upgrades.  They may also list changes to
 113       major ports/packages or release engineering practices.  Clearly
 114       the release notes cannot list every single change made to &os;
 115       between releases; this document focuses primarily on security
 116       advisories, user-visible changes, and major architectural
 117       improvements.</para>
 118
 119     <sect2 id="security">
 120       <title>Security Advisories</title>
 121
 122       <para>Problems described in the following security advisories have
 123         been fixed.  For more information, consult the individual
 124         advisories available from
 125         <ulink url="http://security.FreeBSD.org/"></ulink>.</para>
 126
 127       <informaltable frame="none" pgwide="0">
 128         <tgroup cols="3">
 129           <colspec colwidth="1*">
 130           <colspec colwidth="1*">
 131           <colspec colwidth="3*">
 132             <thead>
 133               <row>
 134                 <entry>Advisory</entry>
 135                 <entry>Date</entry>
 136                 <entry>Topic</entry>
 137               </row>
 138             </thead>
 139
 140             <tbody>
 141               <row>
 142                 <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-09:01.lukemftpd.asc"
 143                               >SA-09:01.lukemftpd</ulink></entry>
 144                 <entry>07&nbsp;January&nbsp;2009</entry>
 145                 <entry><para>Cross-site request forgery in
 146                   &man.lukemftpd.8;</para></entry>
 147               </row>
 148
 149               <row>
 150                 <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-09:02.openssl.asc"
 151                               >SA-09:02.openssl</ulink></entry>
 152                 <entry>07&nbsp;January&nbsp;2009</entry>
 153                 <entry><para>OpenSSL incorrectly checks for malformed
 154                   signatures</para></entry>
 155               </row>
 156
 157               <row>
 158                 <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-09:03.ntpd.asc"
 159                               >SA-09:03.ntpd</ulink></entry>
 160                 <entry>13&nbsp;January&nbsp;2009</entry>
 161                 <entry><para>ntpd cryptographic signature
 162                   bypass</para></entry>
 163               </row>
 164
 165               <row>
 166                 <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-09:04.bind.asc"
 167                               >SA-09:04.bind</ulink></entry>
 168                 <entry>13&nbsp;January&nbsp;2009</entry>
 169                 <entry><para>BIND DNSSEC incorrect checks for
 170                   malformed signatures</para></entry>
 171               </row>
 172
 173               <row>
 174                 <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-09:05.telnetd.asc"
 175                               >SA-09:05.telnetd</ulink></entry>
 176                 <entry>16&nbsp;February&nbsp;2009</entry>
 177                 <entry><para>telnetd code execution
 178                   vulnerability</para></entry>
 179               </row>
 180
 181               <row>
 182                 <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-09:06.ktimer.asc"
 183                               >SA-09:06.ktimer</ulink></entry>
 184                 <entry>23&nbsp;March&nbsp;2009</entry>
 185                 <entry><para>Local privilege escalation</para></entry>
 186               </row>
 187
 188               <row>
 189                 <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-09:07.libc.asc"
 190                               >SA-09:07.libc</ulink></entry>
 191                 <entry>04&nbsp;April&nbsp;2009</entry>
 192                 <entry><para>Information leak in &man.db.3;</para></entry>
 193               </row>
 194
 195               <row>
 196                 <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-09:08.openssl.asc"
 197                               >SA-09:08.openssl</ulink></entry>
 198                 <entry>22&nbsp;April&nbsp;2009</entry>
 199                 <entry><para>Remotely exploitable crash in
 200                   OpenSSL</para></entry>
 201               </row>
 202             </tbody>
 203         </tgroup>
 204       </informaltable>
 205     </sect2>
 206
 207     <sect2 id="kernel">
 208       <title>Kernel Changes</title>
 209
 210       <para>&os; DTrace subsystem now supports a probes for process execution.</para>
 211
 212       <sect3 id="boot">
 213         <title>Boot Loader Changes</title>
 214
 215         <para></para>
 216       </sect3>
 217
 218       <sect3 id="proc">
 219         <title>Hardware Support</title>
 220
 221         <para></para>
 222
 223         <sect4 id="mm">
 224           <title>Multimedia Support</title>
 225
 226           <para>The &man.agp.4; now supports Intel G4X series graphics
 227             chipsets.</para>
 228
 229           <para>The DRM, a kernel module named Direct Rendering
 230             Manager that gives direct hardware access to DRI clients,
 231             has been updated.  Support for AMD/ATI r500 and IGP based
 232             chips, XGI V3XE/V5/V8, and Intel i915 chipsets has been
 233             improved.</para>
 234
 235           <para>The &man.snd.hda.4; driver has been updated.  Changes
 236             include: multiple codec per HDA bus, multiple functional
 237             gropups per codec, multiple audio devices per functional
 238             group, digital (SPDIF/HDMI) audio input/output,
 239             suspend/resume, and part of multichannel audio.</para>
 240
 241           <para>Note that due to added HDMI audio and logical audio
 242             devices support, updated driver often provides several PCM
 243             devices.  In some cases it can make system default audio
 244             device no longer corresponding to the users's habbitual
 245             audio connectors.  In such cases the default device can be
 246             specified in audio application setup or defined globally
 247             via <varname>hw.snd.default_unit sysctl</varname>
 248             as described in the &man.sound.4; manual page.</para>
 249         </sect4>
 250
 251         <sect4 id="net-if">
 252           <title>Network Interface Support</title>
 253
 254           <para></para>
 255
 256         </sect4>
 257       </sect3>
 258
 259       <sect3 id="net-proto">
 260         <title>Network Protocols</title>
 261
 262         <para>The &man.jail.8; subsystem now supports start with a
 263           specific route FIB.</para>
 264
 265         <para>The &man.ng.netflow.4; Netgraph node now supports
 266           ability to generate egress netflow instead or in addition to
 267           ingress.  A <literal>NGM_NETFLOW_SETCONFIG</literal> control
 268           message has been added to control the new functionality.</para>
 269       </sect3>
 270
 271       <sect3 id="disks">
 272         <title>Disks and Storage</title>
 273
 274         <para>The &man.mmc.4; and &man.mmcsd.4; driver now support MMC
 275           and SDHC cards, high speed timing, wide bus, and multiblock
 276           transfers.</para>
 277
 278         <para>The &man.sdhci.4; driver has been added.  This supports
 279           PCI devices with class 8 and subclass 5 accord- ing to SD Host
 280           Controller Specification.</para>
 281
 282         <para>The &man.mmc.4; &man.mmcsd.4;, and &man.sdhci.4; driver
 283           are now included as a kernel module.</para>
 284       </sect3>
 285
 286       <sect3 id="fs">
 287         <title>File Systems</title>
 288
 289         <para></para>
 290       </sect3>
 291     </sect2>
 292
 293     <sect2 id="userland">
 294       <title>Userland Changes</title>
 295
 296       <para>The &man.fetch.1; utility now supports an
 297         <option>-i</option> flag which supports If-Modified-Since HTTP
 298         request.</para>
 299
 300       <para>The &man.fsck.8; utility now supports a
 301         <option>-C</option> flag for catastriphic recovery mode, which
 302         will enable certain aggressive operations that can make
 303         &man.fsck.8; to survive with file systems that has very
 304         serious data damage, which is an useful last resort when on
 305         disk data damage is very serious and causes &man.fsck.8; to
 306         crash otherwise.</para>
 307
 308       <para>A bug in the &man.ipfw.8; utility which displays extra
 309         messages for a NAT rule even when a <option>-q</option> flag
 310         is specified.</para>
 311
 312       <para>The &man.powerd.8; program has been improved.  Changes
 313         include reasonable CPU load estimation on SMP systems and a
 314         new mode named as <literal>hiadaptive</literal> for AC-powered
 315         systems which rises frequency twice faster, drops it 4 times
 316         slower, prefers twice lower CPU load and has additional delay
 317         before leaving the highest frequency after the period of
 318         maximum load.</para>
 319
 320       <para>The &man.strndup.3; function has been added.</para>
 321
 322       <para>A bug in the &man.rpc.yppasswdd.8; program which leaves a
 323         zombie process when a password or default shell is changed has
 324         been fixed.</para>
 325
 326       <sect3 id="rc-scripts">
 327         <title><filename>/etc/rc.d</filename> Scripts</title>
 328
 329         <para></para>
 330       </sect3>
 331     </sect2>
 332
 333     <sect2 id="contrib">
 334       <title>Contributed Software</title>
 335
 336       <para><application>ISC BIND</application> has been updated to
 337         version 9.4.3-P2.</para>
 338
 339       <para>The timezone database has been updated from
 340         the <application>tzdata2008h</application> release to
 341         the <application>tzdata2009f</application> release.</para>
 342     </sect2>
 343
 344     <sect2 id="ports">
 345       <title>Ports/Packages Collection Infrastructure</title>
 346
 347       <para>A bug in the &man.pkg.create.1; which prevents the
 348         <option>-n</option> flag from working has been fixed.</para>
 349     </sect2>
 350
 351     <sect2 id="releng">
 352       <title>Release Engineering and Integration</title>
 353
 354       <para>The supported version of
 355         the <application>GNOME</application> desktop environment
 356         (<filename role="package">x11/gnome2</filename>) has been
 357         updated from 2.22 to 2.26.</para>
 358
 359       <para>The supported version of
 360         the <application>KDE</application> desktop environment has
 361         been updated from 3.5.10 (<filename
 362         role="package">x11/kde3</filename>) to 4.2.2 (<filename
 363         role="package">x11/kde4</filename>).</para>
 364     </sect2>
 365
 366     <sect2 id="doc">
 367       <title>Documentation</title>
 368
 369       <para></para>
 370     </sect2>
 371   </sect1>
 372
 373   <sect1 id="upgrade">
 374     <title>Upgrading from previous releases of &os;</title>
 375
 376     <para arch="amd64,i386">Beginning with &os; 6.2-RELEASE, binary
 377       upgrades between RELEASE versions (and snapshots of the various
 378       security branches) are supported using the
 379       &man.freebsd-update.8; utility.  The binary upgrade procedure
 380       will update unmodified userland utilities, as well as unmodified
 381       GENERIC or SMP kernels distributed as a part of an official &os;
 382       release.  The &man.freebsd-update.8; utility requires that the
 383       host being upgraded have Internet connectivity.</para>
 384
 385     <para>An older form of binary upgrade is supported through the
 386       <command>Upgrade</command> option from the main
 387       &man.sysinstall.8; menu on CDROM distribution media.  This type
 388       of binary upgrade may be useful on non-&arch.i386;,
 389       non-&arch.amd64; machines or on systems with no Internet
 390       connectivity.</para>
 391
 392     <para>Source-based upgrades (those based on recompiling the &os;
 393       base system from source code) from previous versions are
 394       supported, according to the instructions in
 395       <filename>/usr/src/UPDATING</filename>.</para>
 396
 397     <important>
 398       <para>Upgrading &os; should, of course, only be attempted after
 399         backing up <emphasis>all</emphasis> data and configuration
 400         files.</para>
 401     </important>
 402   </sect1>
 403 </article>