The &os; Project $FreeBSD$ 2012 The &os; Documentation Project &tm-attrib.freebsd; &tm-attrib.ibm; &tm-attrib.ieee; &tm-attrib.intel; &tm-attrib.sparc; &tm-attrib.general; The release notes for &os; &release.current; contain a summary of the changes made to the &os; base system on the &release.branch; development line. This document lists applicable security advisories that were issued since the last release, as well as significant changes to the &os; kernel and userland. Some brief remarks on upgrading are also presented. This document contains the release notes for &os; &release.current;. It describes recently added, changed, or deleted features of &os;. It also provides some notes on upgrading from previous versions of &os;. This distribution of &os; &release.current; is a &release.type; distribution. It can be found at or any of its mirrors. More information on obtaining this (or other) &release.type; distributions of &os; can be found in the Obtaining &os; appendix to the &os; Handbook. All users are encouraged to consult the release errata before installing &os;. The errata document is updated with late-breaking information discovered late in the release cycle or after the release. Typically, it contains information on known bugs, security advisories, and corrections to documentation. An up-to-date copy of the errata for &os; &release.current; can be found on the &os; Web site. This section describes the most user-visible new or changed features in &os; since &release.prev;. Typical release note items document recent security advisories issued after &release.prev;, new drivers or hardware support, new commands or options, major bug fixes, or contributed software upgrades. They may also list changes to major ports/packages or release engineering practices. Clearly the release notes cannot list every single change made to &os; between releases; this document focuses primarily on security advisories, user-visible changes, and major architectural improvements. Problems described in the following security advisories have been fixed. For more information, consult the individual advisories available from . Advisory Date Topic SA-12:01.openssl 3 May 2012 OpenSSL multiple vulnerabilities SA-12:02.crypt 30 May 2012 Incorrect crypt() hashing SA-12:03.bind 12 June 2012 Incorrect handling of zero-length RDATA fields in &man.named.8; SA-12:04.sysret 12 June 2012 Privilege escalation when returning from kernel SA-12:05.bind 6 August 2012 &man.named.8; DNSSEC validation Denial of Service SA-12:06.bind 22 November 2012 Multiple Denial of Service vulnerabilities with &man.named.8; SA-12:07.hostapd 22 November 2012 Insufficient message length validation for EAP-TLS messages SA-12:08.linux 22 November 2012 Linux compatibility layer input validation error The &os; Jail subsystem now supports mounting &man.devfs.5;, &man.nullfs.5;, and ZFS filesystem inside a jail. New &man.jail.8; parameters allow.mount.devfs, allow.mount.nullfs, and allow.mount.zfs to control the per-jail capabilities have been added. All of them are disabled by default. A new &man.loader.8; tunable kern.eventtimer.activetick has been added. This tunable specifies whether each hardclock tick should be run on every active CPU or only one. By setting it to 0, the total number of interrupts can be reduced on SMP machines. The default value is 1. The &man.posix.fadvise.2; system call has been implemented. This is a function similar to &man.madvise.2; except that it operates on a file descriptor instead of a memory region. The &man.filemon.4; pseudo-device has been added. This allows a process to collect file operations data of its children. The &man.sysctl.8; variable kern.stop_scheduler_on_panic is now set to 1 by default. &os;/powerpc64 now supports kernel profiling by using &man.kgmon.8;. The &os; Linux ABI compatibility layer now supports the linux_fadvise64() and linux_fadvise64_64() system calls. The default value of the &man.loader.8; tunable hw.memtest.tests is now automatically set to 0 when &os; is running on a virtual machine. A new &man.loader.8; tunable kern.msgbuf_show_timestamp has been added. When it is enabled, a timestamp is added to each line of the system message buffer. The default value is 0 (disabled). The &man.null.4; and &man.zero.4; pseudo device driver now supports non-blocking mode via the &man.fcntl.2; system call. The &os; &man.sched.ule.4; scheduler has been improved for CPU load balancing on SMT (Simultaneous MultiThreading) CPUs. It gives a 10-15% performance improvement when the number of threads is lesser than the number of logical CPUs. The PREEMPTION kernel option is now enabled in the GENERIC kernel. A new &man.sysctl.8; variable security.bsd.unprivileged_idprio has been added. This variable controls whether non-root users can set an idle priority or not. This is disabled by default. The &man.splash.4; screen interface now supports ASCII art in TheDraw format. The &man.boot0cfg.8; utility now supports configuration of PXE boot via the boot0 boot block temporarily on the next boot. The slice number 6 or a keyword PXE can be specified to enable PXE boot using the -s option. The &os; &man.boot.8; block now supports /boot/config in addition to /boot.config as the boot block parameter file. When both of them exist, the former will be used. The gptboot boot block now reads the backup GPT header from the last LBA only when the primary GPT header and tables are invalid. This mitigates interoperability issues with some &man.geom.4; providers like MIRROR which use the last LBA for the metadata. The zfsboot boot block and zfsloader support filesystems within a ZFS storage pool. In zfsloader, the ZFS device name format is now zfs:pool/fs and the fully qualified file path format is zfs:pool/fs:/path/to/file. The zfsboot boot block accepts the kernel/loader name in the format pool:fs:path/to/file or, as before, pool:path/to/file. In the latter case a default filesystem is used (the pool root or a filesystem with the bootfs property). The zfsboot boot block passes the GUIDs of the selected storage pool and dataset to zfsloader to be used as its defaults. &os;/sparc64 now supports booting from ZFS via the zfsboot boot block and zfsloader. For example, the following commands create a mirrored storage pool rpool consisting of da0a and da0b and configure the storage pool as the root filesystem: &prompt.root; gpart create -s vtoc8 da0 &prompt.root; gpart add -t freebsd-zfs -s 10g da0 &prompt.root; gpart add -t freebsd-swap -s 10g da0 &prompt.root; gpart add -t freebsd-zfs -s 10g da0 &prompt.root; zpool create rpool mirror da0a da0b &prompt.root; zpool set bootfs=rpool rpool &prompt.root; zpool export rpool &prompt.root; gpart bootcode -p /boot/zfsboot da0 &prompt.root; sysctl kern.geom.debugflags=0x10 &prompt.root; dd if=/boot/zfsloader of=/dev/da0a bs=512 oseek=1024 conv=notrunc &prompt.root; dd if=/boot/zfsloader of=/dev/da0b bs=512 oseek=1024 conv=notrunc &prompt.root; zpool import rpool &prompt.root; cp -p /boot/zfs/zpool.cache /rpool/boot/zfs/zpool.cache &prompt.root; zfs set mountpoint=/ rpool The &man.abtn.4; driver, which supports ADB keyboards found on Apple laptops, has been added. A workaround for Erratum 721 for AMD Processor Family 10h and 12h has been implemented. Under a highly specific and detailed set of internal timing conditions, the processor may incorrectly update the stack pointer after a long series of push and/or near-call instructions, or a long series of pop and/or near-return instructions. The atibl(4) driver, which supports backlight control of ATI graphics chips on PowerBooks and iBooks, has been added. The &man.acpi.wmi.4; driver now supports attaching multiple instances. The adm1030(4) driver for G4 MDD fans now shows its PWM parameter in the device's &man.sysctl.8; variable. The cesa(4) driver for the Marvell crypto engine and security accelerator has been added. The &man.hwpmc.4; driver now supports PowerPC G4+ (MPC745x/MPC744x). The &man.hwpmc.4; driver now supports the Intel Sandy Bridge microarchitecture. The &man.hwpmc.4; driver now supports software events. Simultaneous usage of software PMC and hardware PMC is allowed. The pcf8563(4) driver for the NXP (Philips) PCF8563 RTC has been added. &os;/powerpc now supports the PWM-controlled fans found on the PowerMac SMU (System Management Unit). &os;/arm now supports the Atmel SAM9XE family of microcontrollers. The following &man.sysctl.8; variables have been added: kern.proc.env for environment strings, kern.proc.auxv for ELF auxiliary vectors from a process's stack, kern.proc.groups for process groups, kern.proc.rlimit for process resource limits, kern.proc.ps_strings for the ps_strings location, and kern.proc.osrel for the osreldate of the process's binary. The &man.usb.4; driver now handles suspend and resume correctly with no need to reload the kernel module. A bug in the &man.xhci.4; (USB 3.0) driver has been fixed. It did not work with USB 3.0 hubs. The &man.viawd.4; driver, which supports the watchdog timer found in VIA south bridges (VT8251, CX700, VX800, VX855, VX900), has been added. The &man.wbwd.4; driver, which supports the watchdog timer found in Winbond Super I/O chips, has been added. The drm2(4) Intel GPU driver, which supports GEM and KMS and works with new generations of GPUs such as IronLake, SandyBridge, and IvyBridge, has been added. The &man.agp.4; driver now supports SandyBridge and IvyBridge CPU northbridges. The &man.snd.hda.4; driver has been updated. It now supports and provides HDMI, new volume control, automatic recording source selection, runtime reconfiguration, more then 4 PCM devices on a controller, multichannel recording, additional playback/record streams, higher bandwidth, and more informative device names. The &man.snd.hdspe.4; driver has been added. This supports RME HDSPe AIO and RayDAT sound cards. GPL-licensed headers in the &man.snd.emu10kx.4;, &man.snd.maestro3.4;, and &man.snd.csa.4; drivers have been replaced with BSD-licensed one. These drivers are now fully BSD-licensed and included in the GENERIC kernel on &os;/amd64 and &os;/i386. A bug in the &man.ae.4; driver which could prevent it from working under certain conditions has been fixed. The &man.axe.4; driver now supports TX/RX checksum offloading support for the ASIX AX88772B controller. The &man.bce.4; driver has been improved: Unnecessary link up/down has been eliminated. A bug has been fixed which could prevent IPMI from working when the interface was marked as down. It now supports remote PHYs, which allow the controller to perform MDIO type accesses to a remote transceiver by using message pages defined through MRBE (MultiRate Backplane Ethernet). This is found on machines such as the Dell PowerEdge M610 Blade. The &man.bge.4; and brgphy(4) drivers have been improved: A bug which could prevent DMA functionality from working correctly has been fixed. It now works with a PCI-X BCM 5704 controller that is connected to AMD-8131 PCI-X bridge. It now supports the BCM 5720 and BCM 5720C PHY, and the BCM 57780 1000BASE-T media interface. It now supports a &man.loader.8; tunable dev.bge.N.msi to control the use of MSI. The default value is 1 (enabled). The &man.cxgbe.4; and &man.cxgb.4; drivers have been updated to firmware version 1.5.2.0. They now support device configuration via a plain text configuration file, IPv6 hardware checksumming, IPv6 TSO and LRO, a loadfw command in the cxgbetool(8) utility which allows installing a firmware to the card, and &man.sysctl.8; variables under dev.t4nex.N.misc for various information. The &man.dc.4; driver now supports NVIDIA (ULi) M5261/M5263 PCI FastEthernet controllers, which are found on the ULi M1563 South Bridge and M1689 Bridge. The &man.et.4; driver now works on all platforms. A bug which could prevent &man.altq.4; support from working has been fixed. A new &man.sysctl.8; variable under dev.et.N.stats has been added for hardware MAC statistics. The &man.igb.4; driver has been updated to version 2.3.4. It now supports newer i210/i211 devices. The &man.iwn.4; driver now supports Intel Centrino Wireless-N + WiMAX 6150 and Wireless-N 100/130 series. The &man.miibus.4; bus driver now supports device hints hint.miibus.N.phymask for PHY addresses being probed. This is useful to manually probe PHYs which do not implement basic the register set of IEEE 802.3. Also, the &man.miibus.4; driver has been changed to a hinted bus, allowing to add child devices via hints and to set their attach arguments in addition to automatically-probed PHYs. The &man.msk.4; driver now uses 64-bit DMA addressing on 64-bit platforms. The &man.mxge.4; driver has been updated to firmware version 1.4.55 from Myricom. The nsphyter(4) driver now supports National DP83849. The &man.oce.4; driver, which supports Emulex OneConnect 10Gbit Ethernet cards, has been added. The &man.ral.4; driver now supports Ralink RT2800 and RT3000 chipsets. The &man.re.4; driver now supports the RTL8411 PCIe Gigabit Ethernet controller. A bug which could prevent WoL (Wake-on-LAN) from working on RTL8168E has been fixed. The &man.runfw.4; firmware has been updated to version 0.236. The &man.sfxge.4; driver, which supports 10Gb Ethernet adapters based on Solarflare SFC9000 family controllers, has been added. The smcphy(4) driver now supports the Seeq Technology 80220 PHY. This is found on Adaptec AIC-6915 Starfire Ethernet controllers supported by the &man.sf.4; driver. The &man.ti.4; driver now supports the &man.altq.4; framework, reporting link-state changes, and &man.sysctl.8; variables under dev.ti.N for interrupt moderation parameters. A bug in the &man.ti.4; driver which could prevent it from working correctly with the PAE kernel option has been fixed. The &man.vge.4; driver has been updated to improve its link establishment and link-state detection. The &man.vr.4; driver now enables flow control capability in the PHY drivers. The &man.xnb.4; Xen Paravirtualized Backend Ethernet Driver (netback) has been updated. This is attached via the newbus framework and works properly in both HVM and PVM mode. The &man.if.bridge.4; pseudo-interface now supports reporting link-state changes depending on the status of the member interfaces. The table argument in the &man.ipfw.4; packet filter rule syntax now supports IP address, interface name, port number, and jail ID. The following syntax is valid: skipto tablearg ip from any to any via table(42) in The &os; &man.ip6.4; protocol stack has been improved in terms of its performance. Benchmarking can be found at . The &os; &man.ip6.4; protocol stack now supports multiple FIBs. An IPv6 default route configured via Router Advertisement messages is now reinstalled correctly when the default route is manually removed and then another RA message is received for the same route. A bug which could return an incorrect value for the IPV6_MULTICASE_HOPS socket option has been fixed. A new &man.sysctl.3; name NET_RT_IFLISTL has been added. This queries the address list and works on extended and extensible structures if_msghdrl and ifa_msghdrl without breaking the ABI. The &man.netmap.4; fast packet I/O framework has been added. The &man.em.4;, lem(4), &man.igb.4;, and &man.re.4; drivers now support this framework. The technical details can be found at . The &os; &man.sctp.4; protocol stack now supports a new &man.sysctl.8; variable net.inet.sctp.blackhole. If this is set to 1, no ABORT is sent back in response to an incoming INIT. If this is set to 2, no ABORT is sent back in response to an out-of-the-blue packet. If set to 0 (the default), ABORTs are sent. A bug which could cause a system panic when SCTP_RECVINFO or SCTP_NXTINFO is specified to the &man.getsockopt.2; system call has been fixed. The &os; &man.sctp.4; protocol stack now supports the SCTP_REMOTE_UDP_ENCAPS_PORT socket option. The SO_PROTOCOL and SO_PROTOTYPE socket options have been added. These return the socket protocol number. The TCP_KEEPINIT, TCP_KEEPIDLE, TCP_KEEPINTVL, and TCP_KEEPCNT socket options have been added. These allow controlling initial timeout, idle time, idle resend interval, and idle send count on a per-socket basis. The &man.arcmsr.4; driver has been updated to version 1.20.00.25. The &man.ahci.4; driver now supports a new &man.loader.8; tunable hw.ahci.force. This controls whether it attempts to attach an AHCI-capable device even if it is configured to use legacy emulation. This is enabled by default. The new &man.cam.4;-based &man.ata.4; driver now supports old &man.loader.8; tunables hw.ata.ata_dma and hw.ata.atapi_dma, for backward compatibility. The &man.cam.4; driver now supports SEMB (SATA Enclosure Management Bridge) devices, which are equivalent to the SCSI SES/SAF-TE devices. A new &man.sysctl.8; variable kern.cam.pmp.hide_special has been added. This controls whether special PMP ports such as PMP (Port MultiPlier) configuration or SEMB (SATA Enclosure Management Bridge) will be exposed or hidden. The default value is 1 (hidden). The ctl(4) driver, which supports &man.cam.4; Target Layer and &man.ctladm.8;, a userland control utility, have been added. ctl(4) is a disk and processor device emulation subsystem supporting tagged queuing, SCSI task attribute, SCSI implicit command ordering, full task management, multiple ports, multiple simultaneous initiators, multiple simultaneous backing stores, mode sense/select, and error injection support. The &man.cd.4; driver now supports Audio CDs in the same way as &man.acd.4; did. It will report a 2352-byte sector size to the &man.geom.4; subsystem and use the READ CD command for reading the data. This fixes an interoperability issue with multimedia/vlc. The &man.da.4; driver now supports BIO_DELETE. To select the method, a new &man.sysctl.8; variable kern.cam.da.N.delete_method has been added for each device instance. The following values are supported: Value Method NONE no provisioning support reported by the device DISABLE provisioning support was disabled because of errors ZERO WRITE SAME (10) command to write zeroes WS10 WRITE SAME (10) command with UNMAP bit set WS16 use WRITE SAME (16) command with UNMAP bit set UNMAP use UNMAP command (equivalent of the ATA DSM TRIM command) When it was NONE, the device did not report logical block provisioning support via respective VPD pages. One can set a specific method for testing and it will be disabled automatically when not supported on the device. The MIRROR &man.geom.4; class now supports BIO_DELETE. This means the TRIM command will be issued on supported devices when deleting data. The MULTIPATH &man.geom.4; class has been updated. It now supports Active/Active mode, Active/Read mode as hybrid of Active/Active and Active/Passive, keeping a failed path without removing the geom provider, manual configuration without on-disk metadata, and add, remove, fail, restore, configure subcommands in the &man.gmultipath.8; utility to manage the configured paths. The PART_LDM &man.geom.4; class has been added. This partition scheme has support for Logical Disk Manager, which is also known as dynamic volumes in Microsoft Windows NT. Note that JBOD, RAID0, and RAID5 volumes are not supported yet. The PART_MBR &man.geom.4; class now allows a primary or extended Linux swap partition to be used as the system dump device. The RAID &man.geom.4; class is now included in the GENERIC kernel. The RAID &man.geom.4; class now supports disks with over 2TB capacity for the Intel metadata format. The RAID &man.geom.4; class now supports the DDF metadata format, which is defined in the SNIA Common RAID Disk Data Format Specification v2.0. The UNCOMPRESS &man.geom.4; class and the &man.mkulzma.8; utility have been added. This class supports lzma compressed images like the UZIP &man.geom.4; class and the &man.mkuzip.8; utility. The &man.hpt27xx.4; driver has been added. This supports HighPoint RocketRAID 27xx-based SAS 6Gb/s HBA. The &man.isci.4; driver, which supports the integrated SAS controller in the Intel C600 (Patsburg) chipset, has been added. Bugs in &man.isp.4; target mode have been fixed. The &man.ixgbe.4; driver now supports the Intel X540 adapter. A bug in the &man.mfi.4; driver has been fixed. It could cause some inconsistencies due to missed interrupt acknowledgements and output the following log message: mfi0: COMMAND 0xffffffXXXXXXXXXX TIMEOUT AFTER XX SECONDS The &man.mfi.4; driver now supports single-message MSI, and Drake Skinny and Thunderbolt cards. The &man.loader.8; tunable hw.mfi.msi has been added and it is enabled by default. The &man.mps.4; driver has been updated to version 14.00.00.01-fbsd. This now supports Integrated RAID, WarpDrive controllers, WRITE12 and READ12 for direct I/O, SCSI protection information (EEDP), Transport Level Retries (TLR) for tape drives, and LSI's userland utility. A bug in the &man.mpt.4; driver has been fixed. It could attempt to attach MegaRAID cards which should be handled by the &man.mfi.4; driver. The &man.usb.4; storage device driver now enables power save mode by default. The &os; NFS filesystem has been improved: It now supports a timeout on positive name cache entries on the client side. A new mount option nametimeo has been added and set to 60 (in seconds) by default. A memory leak when a ZFS volume is exported via the &os; NFS server has been fixed. A bug has been fixed. When a process writes to an mmap-backed file on an NFS filesystem, flushing changes to the data could fail under some circumstances such as errors due to permission mismatch, and this failure could not be detected as an error. A new &man.sysctl.8; variable vfs.nfs.nfs_keep_dirty_on_error has been added to control the behavior on the client side related to this issue. When this is set to 1, the pages where a write operation failed are kept dirty. The default value is set to 0. The &man.nfsv4.4; filesystem now supports a &man.sysctl.8; variable vfs.nfsd.disable_checkutf8. This disables the check for UTF-8 compliance in filenames. This is disabled by default. Note that enabling this may help wht some interoperability issues but results in an NFSv4 server that is not RFC 3530 compliant. The &man.tmpfs.5; filesystem is not an experimental implementation anymore. The &man.tmpfs.5; filesystem now supports a &man.sysctl.8; variable vfs.tmpfs.memory_reserved to set the amount of required free pages when &man.tmpfs.5; attempts to allocate a new node. &os;'s ZFS filesystem has been updated by merging improvements from the illumos project. The following changes are made: New properties, clones and written, have been added. The &man.zfs.8; send command now reports an estimated size of the stream. The &man.zfs.8; destroy command now reports an estimate of the space which would be reclaimed, when -n is specified. The &man.zfs.8; get command now supports the -t type flag to specify the data type. A simple script zfsboottest.sh has been added to the source tree. This checks if the system is configured correctly when using ZFS as the root filesystem. The script is located at /usr/src/tools/tools/zfsboottest.sh and it uses the zfsboottest binary program in the same directory. The binary program can be built and installed by the following command: &prompt.root; cd /usr/src/tools/tools/zfsboottest &prompt.root; make &prompt.root; make install After that, the following command can be used to check the system. poolname is the ZFS storage pool name to boot: &prompt.root; sh /usr/src/tools/tools/zfsboottest/zfsboottest.sh poolname The &man.sysctl.8; variable vfs.zfs.txg.timeout has been changed from read-only to writable. &man.auth.conf.5; has been removed because it was deprecated years ago. The &man.camcontrol.8; utility now supports a fwdownload subcommand for firmware update on SCSI devices from Hitachi, HP, IBM, Plextor, Quantum, and Seagate. This subcommand will reprogram the firmware on devices connected over an ATA/SATA transport. The &man.dhclient.8; utility now supports domain-search (option number 119, described in RFC 3397). This allows a DHCP server to publish a list of implicit domain suffixes used during name lookup. If this option is specified, a search keyword will be added to /etc/resolv.conf. The &man.dump.8; utility now uses 53 characters for the device names in /etc/dumpdates. This was previously limited to 32 characters. The &man.fetch.1; utility now correctly supports a percent-encoded user and password part in a URL. The &man.fdlopen.3; function has been implemented. This is an interface for &man.rtld.1; to load a shared object by file descriptor. The &man.fopen.3; function now supports the x (an exclusive create-and-open mode) option in the ISO/IEC 9899:2011 and C11 standards. A bug in the &man.gcc.1; compiler has been fixed. It could lead to incorrect calculations when -ffast-math is specified. The &man.hastd.8; daemon now supports specifying the filename of its process ID file in &man.hast.conf.5;. The &man.ifconfig.8; utility now supports a vlanhwcsum parameter to set or reset checksum offloading capability on VLANs. A bug in the &man.ifconfig.8; utility which could display an error message in a jail with no IPv6 support has been fixed. The &man.ifconfig.8; utility now supports a carp state state parameter to set the state to backup or master forcibly. The &man.jail.8; utility now supports a configuration file (&man.jail.conf.5;) for complex configurations. The &man.kdump.1; utility now supports a -p pid option to accept either a process ID or a thread ID. The &man.kenv.1; utility now supports a -v flag to display an entry in name=value format, and a -N flag to display only the name. The &man.kldload.8; utility now supports a -n flag to ignore the error status when the specified module is already loaded. libedit has been updated to a NetBSD snapshot as of 28 December, 2009. &man.libmap.conf.5; now supports include and includedir directives. They allow to include specified files for the configuration. Lock handling performance in the libthr pthread library has been improved. It now works 10 times faster especially under the condition that a mutex is heavily contested. A new C++ stack has been imported. This consists of libcxxrt, originally developed by a &os; developer under contract by PathScale and open sourced by the &os; and NetBSD foundations, and libc++ from the LLVM project. libcxxrt is a drop-in replacement for GNU libsupc++, which implements the C++ runtime support for features such as run-time type information, dynamic casting, thread-safe static initializer, and exceptions. libc++ implements the C++11 standard library, and will replace GNU libstdc++ in a future release. In 9.1-RELEASE, libstdc++ is still installed as standard and now dynamically links against libsupc++. This allows libraries linking libstdc++ and libc++ to both be used in the same program, to aid migration. The &man.limits.1; utility now supports a -P pid option to control limits for the specified process. The &man.pciconf.8; utility now supports a -e flag to display PCI error details in listing mode. When this is specified, the status of any error bits in the PCI status register and PCI-express device status register will be displayed. It also lists any errors indicated by version 1 of PCI-express Advanced Error Reporting (AER). The &man.procstat.1; utility now shows the superpage mapping flag when displaying process virtual memory mappings. The &man.procstat.1; utility now supports an -e flag to display process environment variables, an -x flag to display ELF auxiliary vectors, and an -l flag to display resource limits. A bug in the &man.remquo.3; functions where the quotient did not always have the correct sign when the remainder was 0, and another bug that the remainder and quotient were both off by a bit in certain cases involving subnormal remainders, have been fixed. Note that these bugs affected all platforms except amd64 and i386. The &man.rtld.1; run-time linker now supports GCC's RELRO (RElocation Read-Only). This prevents the GOT (Global Offset Table) from being overwritten. The &man.rtld.1; run-time linker now supports a GNU hash section (DT_GNU_HASH), which is a replacement of optional ELF hash section. The &man.setbuf.1; utility and libstdbuf library have been added. This controls the default buffering behavior of standard stdio streams. The &man.top.1; utility now correctly supports per-thread I/O statistics of ZFS in the -m io option. The &man.unzip.1; utility now supports a -Z option for zipinfo. The &man.xlocale.3; API has been implemented. This consists of _l-suffixed versions of various standard library functions that use the global locale, making them take an explicit locale parameter and allowing thread-safe extended locale support. Most of these APIs are required for IEEE Std 1003.1-2008 (POSIX.1-2008 or ISO/IEC 9945:2009) compatibility, and are required by libc++ and recent versions of GNOME. This implementation also supports several extensions for compatibility with Apple Darwin. A new variable daily_status_zfs_zpool_list_enable has been added. It controls whether or not to list all of the ZFS pools in periodic/daily/404.status-zfs. The default value is YES. The default value of daily_scrub_zfs_default_threshold used in periodic/daily/800.scrub-zfs is now set to 35 days. The rc.d/nfsd script now sets the vfs.nfsd.server_max_nfsvers &man.sysctl.8; variable to 4 when nfsv4_server_enable is set to YES. A backwards compatibility issue when both ipv6_enable=YES and ipv6_gateway_enable=YES are defined at the same time has been fixed. ISC BIND has been updated to version 9.8.3-P4. The compiler-rt library, which provides low-level target-specific interfaces such as functions in libgcc, has been updated to revision 147467. file (&man.file.1;) has been updated to version 5.11. GNU &man.gperf.1; has been updated to version 3.0.3 (the latest GPLv2-licensed version). libarchive, &man.bsdtar.1;, and &man.cpio.1; have been updated to version 2.8.5. The libpcap library has been updated to 1.2.1. libstdc++ has been updated to revision 135556 of the gcc-4_2-branch (the last LGPLv2-licensed version). The LLVM compiler infrastructure and clang, a C language family front-end, version 3.1 have been imported. Note that it is not used for building the &os; base system by default. The netcat utility has been updated to version 5.1. OpenSSL has been updated to version 0.9.8x. The sendmail (&man.sendmail.8;) utility has been updated to version 8.14.7. The tcpdump (&man.tcpdump.1;) utility has been updated to version 4.2.1. The TENEX C shell (&man.tcsh.1;) has been updated to version 6.18.01. The timezone database has been updated to the tzdata2012a release. The zlib library has been updated to version 1.2.7. The supported version of the KDE desktop environment (x11/kde4) has been updated to 4.8.4. Issues where the &os; installation CDROM image caused a panic, and was not recognized on OpenBIOS-based environments like QEMU, have been fixed. Beginning with &os; 6.2-RELEASE, binary upgrades between RELEASE versions (and snapshots of the various security branches) are supported using the &man.freebsd-update.8; utility. The binary upgrade procedure will update unmodified userland utilities, as well as an unmodified GENERIC kernel, distributed as a part of an official &os; release. The &man.freebsd-update.8; utility requires that the host being upgraded have Internet connectivity. Source-based upgrades (those based on recompiling the &os; base system from source code) from previous versions are supported using to the instructions in /usr/src/UPDATING. For more specific information about upgrading instructions, see . Upgrading &os; should, of course, only be attempted after backing up all data and configuration files. FreeBSD 9.0 and later have several incompatibilities in system configuration which you might want to know before upgrading your system. Please read this section and the Upgrading Section in 9.0-RELEASE Release Notes carefully before submitting a problem report and/or posting a question to the FreeBSD mailing lists.