release/doc/en_US.ISO8859-1/relnotes/article.xml

   1 <?xml version="1.0" encoding="iso-8859-1"?>
   2 <!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
   3         "../../../share/xml/freebsd50.dtd" [
   4 <!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN" "release.ent">
   5         %release;
   6 <!ENTITY % sponsor PUBLIC "-//FreeBSD//ENTITIES Sponsor Specification//EN" "sponsor.ent">
   7  %sponsor;
   8 <!ENTITY % vendor PUBLIC "-//FreeBSD//ENTITIES Vendor Specification//EN" "vendor.ent">
   9  %vendor;
  10 ]>
  11 <article xmlns="http://docbook.org/ns/docbook" xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0">
  12   <info>
  13     <title>&os; &release.current; Release Notes</title>
  14
  15     <author><orgname>The &os; Project</orgname></author>
  16
  17     <pubdate>$FreeBSD$</pubdate>
  18
  19     <copyright>
  20       <year>2014</year>
  21       <holder role="mailto:doc@FreeBSD.org">The &os; Documentation
  22         Project</holder>
  23     </copyright>
  24
  25     <legalnotice xml:id="trademarks" role="trademarks">
  26       &tm-attrib.freebsd;
  27       &tm-attrib.ibm;
  28       &tm-attrib.ieee;
  29       &tm-attrib.intel;
  30       &tm-attrib.sparc;
  31       &tm-attrib.general;
  32     </legalnotice>
  33
  34     <abstract>
  35       <para>The release notes for &os; &release.current; contain
  36         a summary of the changes made to the &os; base system on the
  37         &release.branch; development line.  This document lists
  38         applicable security advisories that were issued since the last
  39         release, as well as significant changes to the &os; kernel and
  40         userland.  Some brief remarks on upgrading are also
  41         presented.</para>
  42     </abstract>
  43   </info>
  44
  45   <sect1 xml:id="intro">
  46     <title>Introduction</title>
  47
  48     <para>This document contains the release notes for &os;
  49       &release.current;.  It describes recently added, changed, or
  50       deleted features of &os;.  It also provides some notes on
  51       upgrading from previous versions of &os;.</para>
  52
  53     <para>This distribution of &os; &release.current; is
  54       a &release.type; distribution.  It can be found at <uri
  55         xlink:href="&release.url;">&release.url;</uri> or any of its
  56       mirrors.  More information on obtaining this (or other)
  57       &release.type; distributions of &os; can be found in the <link
  58         xlink:href="&url.books.handbook;/mirrors.html"><quote>Obtaining
  59           &os;</quote> appendix</link> to the <link
  60         xlink:href="&url.books.handbook;/">&os;
  61         Handbook</link>.</para>
  62
  63     <para>All users are encouraged to consult the release errata
  64       before installing &os;.  The errata document is updated with
  65       <quote>late-breaking</quote> information discovered late in the
  66       release cycle or after the release.  Typically, it contains
  67       information on known bugs, security advisories, and corrections
  68       to documentation.  An up-to-date copy of the errata for &os;
  69       &release.current; can be found on the &os; Web site.</para>
  70   </sect1>
  71
  72   <sect1 xml:id="new">
  73     <title>What's New</title>
  74
  75     <para>This section describes the most user-visible new or changed
  76       features in &os; since &release.prev;.</para>
  77
  78     <para>Typical release note items document recent security
  79       advisories issued after &release.prev;, new drivers or hardware
  80       support, new commands or options, major bug fixes, or
  81       contributed software upgrades.  They may also list changes to
  82       major ports/packages or release engineering practices.  Clearly
  83       the release notes cannot list every single change made to &os;
  84       between releases; this document focuses primarily on security
  85       advisories, user-visible changes, and major architectural
  86       improvements.</para>
  87
  88     <sect2 xml:id="security">
  89       <title>Security Advisories</title>
  90
  91       <para>Problems described in the following security advisories
  92         have been fixed.  For more information, consult the individual
  93         advisories available from <uri
  94           xlink:href="http://security.FreeBSD.org/">http://security.FreeBSD.org/</uri>.</para>
  95
  96       <informaltable frame="none" pgwide="1">
  97         <tgroup cols="3">
  98           <colspec colwidth="1*"/>
  99           <colspec colwidth="1*"/>
 100           <colspec colwidth="3*"/>
 101           <thead>
 102             <row>
 103               <entry>Advisory</entry>
 104               <entry>Date</entry>
 105               <entry>Topic</entry>
 106             </row>
 107           </thead>
 108
 109           <tbody>
 110             <row>
 111               <entry><link
 112                   xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:01.bsnmpd.asc">FreeBSD-SA-14:01.bsnmpd</link></entry>
 113               <entry>14&nbsp;January&nbsp;2014</entry>
 114               <entry><para>Fix &man.bsnmpd.1; remote denial of service
 115                   vulnerability</para></entry>
 116             </row>
 117
 118             <row>
 119               <entry><link
 120                   xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:02.ntpd.asc">FreeBSD-SA-14:02.ntpd</link></entry>
 121               <entry>14&nbsp;January&nbsp;2014</entry>
 122               <entry><para>Disable <quote>monitor</quote> feature in
 123                   &man.ntpd.8; by default</para></entry>
 124             </row>
 125
 126             <row>
 127               <entry><link
 128                   xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:04.bind.asc">FreeBSD-SA-14:04.bind</link></entry>
 129               <entry>14&nbsp;January&nbsp;2014</entry>
 130               <entry><para>Remote denial of service
 131                   vulnerability</para></entry>
 132             </row>
 133
 134             <row>
 135               <entry><link
 136                   xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:05.nfsserver.asc">FreeBSD-SA-14:05.nfsserver</link></entry>
 137               <entry>8&nbsp;April&nbsp;2014</entry>
 138               <entry><para>Deadlock in the NFS server</para></entry>
 139             </row>
 140
 141             <row>
 142               <entry><link
 143                   xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:06.openssl.asc">FreeBSD-SA-14:06.openssl</link></entry>
 144               <entry>8&nbsp;April&nbsp;2014</entry>
 145               <entry><para>ECDSA side channel leak</para></entry>
 146             </row>
 147
 148             <row>
 149               <entry><link
 150                   xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:08.tcp.asc">FreeBSD-SA-14:08.tcp</link></entry>
 151               <entry>30&nbsp;April&nbsp;2014</entry>
 152               <entry><para>TCP reassembly vulnerability</para></entry>
 153             </row>
 154
 155             <row>
 156               <entry><link
 157                   xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:11.sendmail.asc">FreeBSD-SA-14:11.sendmail</link></entry>
 158               <entry>26&nbsp;May&nbsp;2014</entry>
 159               <entry><para><application>Sendmail</application>
 160                   improper close-on-exec flag handling</para></entry>
 161             </row>
 162
 163             <row>
 164               <entry><link
 165                   xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:12.ktrace.asc">FreeBSD-SA-14:12.ktrace</link></entry>
 166               <entry>3&nbsp;June&nbsp;2014</entry>
 167               <entry><para>&man.ktrace.1; kernel memory
 168                   disclosure</para></entry>
 169             </row>
 170
 171             <row>
 172               <entry><link
 173                   xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:13.pam.asc">FreeBSD-SA-14:13.pam</link></entry>
 174               <entry>3&nbsp;June&nbsp;2014</entry>
 175               <entry><para>Incorrect error handling in PAM policy
 176                   parser</para></entry>
 177             </row>
 178
 179             <row>
 180               <entry><link
 181                   xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:14.openssl.asc">FreeBSD-SA-14:14.openssl</link></entry>
 182               <entry>5&nbsp;June&nbsp;2014</entry>
 183               <entry><para>Multiple vulnerabilities</para></entry>
 184             </row>
 185
 186             <row>
 187               <entry><link xlink:href="http://www.freebsd.org/security/advisories/FreeBSD-SA-14:16.file.asc">FreeBSD-SA-14:16.file</link></entry>
 188               <entry>24&nbsp;June&nbsp;2014</entry>
 189               <entry><para>Multiple vulnerabilities</para></entry>
 190             </row>
 191
 192             <row>
 193               <entry><link xlink:href="http://www.freebsd.org/security/advisories/FreeBSD-SA-14:17.kmem.asc">FreeBSD-SA-14:17.kmem</link></entry>
 194               <entry>8&nbsp;July&nbsp;2014</entry>
 195               <entry><para>Kernel memory disclosure in control
 196                   messages and SCTP notifications</para></entry>
 197             </row>
 198           </tbody>
 199         </tgroup>
 200       </informaltable>
 201     </sect2>
 202
 203     <sect2 xml:id="kernel">
 204       <title>Kernel Changes</title>
 205
 206       <para revision="256033">The &man.arcmsr.4; driver has been
 207         updated to version 1.20.00.28.</para>
 208
 209       <para revision="256437" contrib="sponsor"
 210           sponsor="&ff;">The &man.isci.4; driver is now loadable
 211         via &man.kldload.8;.</para>
 212
 213       <para revision="256759">System-level &man.sysctl.8; values are
 214         now exposed to the system for the &man.ixgbe.4; device.</para>
 215
 216       <para revision="256924">The &man.mfi.4; driver has been updated
 217         to support MegaRAID Invader controllers.</para>
 218
 219       <para revision="257119">A kernel panic triggered in
 220         <literal>zfs_root()</literal> after a failed rollback has
 221         been fixed.</para>
 222
 223       <para revision="257125" contrib="sponsor"
 224           sponsor="&ff;">A new &man.sysctl.8;,
 225         <literal>debug.devfs_iosize_max_clamp</literal> has been added
 226         which enables and disables <literal>SSIZE_MAX</literal>-sized
 227         I/O requests on &man.devfs.5; files.</para>
 228
 229       <para revision="257126" contrib="sponsor" sponsor="&ff;">A new
 230         &man.sysctl.8;, <literal>kern.disallow_high_osrel</literal>,
 231         has been added which disables executing the images compiled on
 232         a userland with a higher major version number than the major
 233         version number of the running kernel.</para>
 234
 235       <para revision="257253">A kernel panic triggered by unmounting
 236         a busy &man.zfs.8; filesystem has been fixed.</para>
 237
 238       <para revision="257373">A deadlock triggered by powering off
 239         a USB device has been fixed.</para>
 240
 241       <para revision="258214">The &man.ichsmb.4; driver has been
 242         updated to support Intel Lynx Point PCH SMBus devices.</para>
 243
 244       <para revision="258215">The &man.ata.4; driver has been updated
 245         to support Coleto Creek devices.</para>
 246
 247       <para revision="258217">The &man.ahci.4; driver has been updated
 248         to support the PCI-express solid state drive in the
 249         &apple;&nbsp;MacBook Air (model A1465).</para>
 250
 251       <para revision="258635">The &man.sysctl.8;
 252         <literal>vfs.zfs.arc_meta_limit</literal> can now be changed
 253         at runtime.</para>
 254
 255       <para revision="258870">The &man.mmap.2; system call has been
 256         updated to more optimally use superpages and provide support
 257         for tweaking the alignment of virtual mappings.</para>
 258
 259       <para revision="258962">A workaround has been implemented
 260         in the &man.bge.4; driver for hung transmission on BCM5719
 261         and BCM5720 chipsets.</para>
 262
 263       <para revision="259002">A kernel panic when listing sysctls
 264         on a system with <literal>INVARIANTS</literal> enabled has
 265         been fixed.</para>
 266
 267       <para revision="259466">A new &man.sysctl.8;,
 268         <literal>kern.supported_archs</literal> has been added,
 269         which will list the <envar>MACHINE_ARCH</envar> values
 270         whose binaries can be run on the system.</para>
 271
 272       <para revision="259519" contrib="sponsor"
 273           sponsor="&spectralogic;">Several problems that could trigger
 274         kernel panic on &man.kldload.8; and &man.kldunload.8; have
 275         been fixed.</para>
 276
 277       <para revision="260082" contrib="sponsor"
 278           sponsor="&ff;">A kernel panic triggered by some
 279         multi-threaded applications has been fixed.</para>
 280
 281       <para revision="260134">The &man.runfw.4; firmware has been
 282         renamed from <literal>runfw</literal> to
 283         <literal>run.fw</literal> for consistency with other firmware
 284         files.</para>
 285
 286       <para revision="260433">A new &man.sysctl.8;,
 287         <literal>kern.panic_reboot_wait_time</literal>, has been
 288         added.  This allows tuning the amount of time the system
 289         will wait before rebooting after &man.panic.9;.  The
 290         <literal>kern.panic_reboot_wait_time</literal> value defaults
 291         to the kernel configuration option,
 292         <literal>PANIC_REBOOT_WAIT_TIME</literal>.</para>
 293
 294       <para revision="260644">Hardware Random Number Generators have
 295         been disabled by default.</para>
 296
 297       <para revision="261485">Support for GPS ports has been added
 298         to the &man.uhso.4; driver.</para>
 299
 300       <para revision="262116">A memory leak of compressed buffers
 301         has been fixed in
 302         <literal>l2arc_write_done()</literal>.</para>
 303
 304       <para revision="262153">The &man.netmap.4; framework has been
 305         updated to match the version in <literal>head/</literal>,
 306         which includes netmap pipes, kqueue support, and enhanced
 307         VALE switch port.</para>
 308
 309       <para revision="262175">A deadlock triggered by sending
 310         a mounted &man.zfs.8; snapshot has been fixed.</para>
 311
 312       <para revision="262231">Support for SIIG X1 PCI-e has been added
 313         to &man.ppc.4;.</para>
 314
 315       <para revision="262564">Support for the ext4 filesystem
 316         has been enabled, supporting read-only mounts.</para>
 317
 318       <para revision="262594">A kernel panic triggered by inserting
 319         a USB ethernet device on VIMAGE-enabled systems has been
 320         fixed.</para>
 321
 322       <para revision="262988" contrib="sponsor" sponsor="&ff;">TTM,
 323         a memory manager used by video
 324         drivers, has been merged.</para>
 325
 326       <para revision="263103">Support for
 327         <literal>/sys/kernel/random/uuid</literal> has been added
 328         to &man.linprocfs.5;.</para>
 329
 330       <para revision="263128">A memory leak in the
 331         <literal>zpool_in_use()</literal> function has been
 332         fixed.</para>
 333
 334       <para revision="263391">The
 335         <literal>extensible_dataset</literal> &man.zpool.8; feature
 336         has been added.  See &man.zpool-features.7; for more
 337         information.</para>
 338
 339       <para revision="263408">A memory leak has been fixed in
 340         <literal>libzfs</literal>.</para>
 341
 342       <para revision="263817,263818" contrib="sponsor"
 343           sponsor="&ff;">The &man.vt.4; driver
 344         has been merged from <literal>head/</literal>.</para>
 345
 346       <para revision="265729" contrib="sponsor"
 347           sponsor="&lsi;, &spectralogic;">The &man.mpr.4; device has
 348         been added, providing support for LSI Fusion-MPT 3 12Gb
 349         SCSI/SATA controllers.</para>
 350
 351       <para revision="266167">A kernel bug that inhibited proper
 352         functionality of the <literal>dev.cpu.0.freq</literal>
 353         &man.sysctl.8; on &intel; processors with Turbo
 354         Boost&nbsp;&trade; enabled has been fixed.</para>
 355
 356       <para revision="266269">Support for &man.xen.4;
 357         hardware-assisted virtualization, <literal>XENHVM</literal>,
 358         is now available as a loadable module,
 359         <literal>xenhvm.ko</literal>.</para>
 360
 361       <sect3 xml:id="proc">
 362         <title>Hardware Support</title>
 363
 364         <para revision="261510">Trackpad support for
 365           &apple;&nbsp;MacBook products has been added.</para>
 366
 367         <para revision="261973">The &man.nve.4; driver has been
 368           deprecated, and the &man.nfe.4; driver should be used
 369           instead.</para>
 370
 371         <para revision="262968">The &man.mfi.4; driver has been
 372           updated to support MegaRAID Fury cards.</para>
 373
 374         <para revision="263170,263171">The Radeon KMS driver has been
 375           added.</para>
 376
 377         <para revision="263340">The &man.aacraid.4; driver has been
 378           updated to version 3.2.5.</para>
 379
 380         <sect4 xml:id="net-if">
 381           <title>Network Interface Support</title>
 382
 383           <para revision="257611">The &man.re.4; driver has been
 384             updated to add preliminary support for the RTL8106E
 385             chipset.</para>
 386
 387           <para revision="257614,257616">The &man.re.4; driver has
 388             been updated to support the RTL8168G, RTL8168GU and
 389             RTL8411B chipsets.</para>
 390
 391           <para revision="257618">The &man.re.4; driver has been
 392             updated to add preliminary support for the RTL8168EP
 393             chipset.</para>
 394
 395           <para revision="258586">The &man.oce.4; driver has been
 396             updated to version 10.0.664.0.</para>
 397
 398           <para revision="258898">The &man.qlxgbe.4; driver has been
 399             imported from <literal>head/</literal>.</para>
 400
 401           <para revision="258936">The &man.qlxge.4; driver has been
 402             imported from <literal>head/</literal>.</para>
 403
 404           <para revision="258965">The &man.bge.4; driver has been
 405             updated to support the BCM5725 chipset.</para>
 406
 407           <para revision="258967">The &man.bge.4; driver has been
 408             updated to support the BCM57764, BCM57767, BCM57782,
 409             BCM57786 and BCM57787 chipsets.</para>
 410
 411           <para revision="259457">The &man.run.4; driver has been
 412             updated to support MediaTek/Ralink chipsets RT5370 and
 413             RT5372.</para>
 414
 415           <para revision="259460">The &man.usb.4; wireless radiotap
 416             headers have been realigned, allowing wireless adapters
 417             to work on &arch.arm;, &arch.mips;, and other similar
 418             platforms where alignment is important.</para>
 419
 420           <para revision="260119">The &man.run.4; firmware has been
 421             updated to version 0.33.</para>
 422
 423           <para revision="260252">The &man.bxe.4; driver has been
 424             merged from <literal>head/</literal>, providing support
 425             for Broadcom NetXtreme II 10Gb PCIe adapters.</para>
 426
 427           <para revision="261865">The &man.run.4; driver has been
 428             updated to include support for the MediaTek/Ralink RT3593
 429             chipset.</para>
 430
 431           <para revision="261933">The &man.run.4; driver has been
 432             updated to include support for the DLINK DWA-127 wireless
 433             adapter.</para>
 434
 435           <para revision="262153">The &man.axge.4; driver has been
 436             added.</para>
 437
 438           <para revision="262362">The &man.urndis.4; driver has been
 439             imported from OpenBSD.</para>
 440
 441           <para revision="263582">The &man.bxe.4; driver has been
 442             updated to version 1.78.78.</para>
 443         </sect4>
 444       </sect3>
 445
 446       <sect3 xml:id="fs">
 447         <title>File Systems</title>
 448
 449         <para revision="263410">The &man.zfs.8; filesystem has been
 450           updated to support the <literal>bookmarks</literal>
 451           feature.</para>
 452       </sect3>
 453     </sect2>
 454
 455     <sect2 xml:id="userland">
 456       <title>Userland Changes</title>
 457
 458       <para revision="256054">A new flag <literal>-c</literal>, has
 459         been added to &man.pgrep.1; and &man.pkill.1;, which restricts
 460         the process lookup to the specified login class.</para>
 461
 462       <para revision="257496">The &man.ddb.8; utility has been updated
 463         to add <command>show ioapic</command> and <command>show all
 464           ioapics</command>.</para>
 465
 466       <para revision="258183">Setting <literal>nmbcluster</literal>
 467         values to their current value will now be ignored, instead of
 468         failing with an error.</para>
 469
 470       <para revision="258763">The <filename
 471           class="directory">/var/cache</filename> directory is now
 472         created with mode <literal>0755</literal> instead of mode
 473         <literal>0750</literal>, since this directory is used by
 474         many third-party applications, which makes dropping group
 475         privileges impossible.</para>
 476
 477       <para revision="258818">The &man.uname.1; utility has been
 478         updated to include the <literal>-U</literal> and
 479         <literal>-K</literal> flags, which print the
 480         <envar>__FreeBSD_version</envar> for the running userland
 481         and kernel, respectively.</para>
 482
 483       <para revision="258844">The &man.fetch.3; library has been
 484         updated to support SNI (Server Name Identification), allowing
 485         to use virtual hosts on HTTPS.</para>
 486
 487       <para revision="259243">A segmentation fault and internal
 488         compiler error bug in &man.gcc.1; triggered by throwing
 489         a warning before parsing any tokens has been fixed.</para>
 490
 491       <para revision="259269,259406" contrib="vendor"
 492           vendor="&google;">Several updates to &man.gcc.1;
 493         have been imported from Google.</para>
 494
 495       <para revision="259448">A byte-order bug in the Heimdal
 496         <literal>gss_pseudo_random()</literal> function which would
 497         prevent interoperability with other
 498         <application>Kerberos</application> implementations has been
 499         fixed.  In particular, this would prevent interoperability
 500         with the MIT implementation.</para>
 501
 502       <para revision="260007">The &man.hastctl.8; utility has been
 503         updated to output the current queue sizes.</para>
 504
 505       <para revision="260197">The &man.ps.1; utility will no longer
 506         truncate the <literal>command</literal> output column.</para>
 507
 508       <para revision="260208">The &man.protect.1; command has been
 509         added, which allows exempting processes from being killed
 510         when swap is exhausted.</para>
 511
 512       <para revision="260507">The &man.gmirror.8; utility now prevents
 513         deactivating the last component of a mirror.</para>
 514
 515       <para revision="260507">A new &man.gmirror.8; command,
 516         <command>gmirror destroy</command>, has been added, which will
 517         destroy the &man.geom.8; and erase the &man.gmirror.8;
 518         metadata.</para>
 519
 520       <para revision="260650">The &man.etcupdate.8; utility, a tool
 521         for managing updates to files in <filename
 522           class="directory">/etc</filename>, has been merged from
 523         <literal>head/</literal>.</para>
 524
 525       <para revision="260651">The &man.find.1; utility has been
 526         updated to fix incorrect behavior with the
 527         <literal>-lname</literal> and <literal>-ilname</literal>
 528         flags.</para>
 529
 530       <para revision="260868,260869">The
 531         <literal>hw.uart.console</literal> is now always updated when
 532         the comconsole setup changes.</para>
 533
 534       <para revision="260909">The &man.kldload.8; utility has been
 535         updated to display a message directing to &man.dmesg.8;,
 536         instead of the cryptic message <quote>Exec format
 537           error</quote>.</para>
 538
 539       <para revision="261674">A bug that could trigger an infinite
 540         loop in KDE and X has been fixed.</para>
 541
 542       <para revision="262076">The &man.newsyslog.8; utility has been
 543         changed to use the size of the file, instead of the blocks the
 544         file takes on the disk to match the behavior documented in
 545         &man.newsyslog.conf.5;.</para>
 546
 547       <para revision="262105">A bug in &man.zdb.8; which would cause
 548         numeric parameters to a flag as being treated as additional
 549         flags has been fixed.</para>
 550
 551       <para revision="262134">The &man.pciconf.8; utility now has
 552         a <literal>-V</literal> flag, which lists information such
 553         as serial numbers for each device.</para>
 554
 555       <para revision="262158">A bug that would allow creating
 556         a &man.zfs.8; snapshot of an inconsistent dataset has been
 557         fixed.</para>
 558
 559       <para revision="262160">Receiving a &man.zfs.8; dataset with
 560         <command>zfs recv -F</command> now properly destroys any
 561         snapshots that were created since the incremental source
 562         snapshot.</para>
 563
 564       <para revision="263031">Installation from a read-only
 565         <envar>.OBJDIR</envar> has been fixed.</para>
 566
 567       <para revision="263031">A new shared library directory,
 568         <filename class="directory">/usr/lib/private</filename>,
 569         has been added for internal-use shared libraries.</para>
 570
 571       <para revision="263031">A default
 572         <filename>libmap32.conf</filename> has been added, for 32-bit
 573         applications.</para>
 574
 575       <para revision="263032">The <literal>libucl</literal> library,
 576         a JSON-compatible configuration file parsing library, has been
 577         imported.</para>
 578
 579       <para revision="263038">The &man.pkg.7; package management
 580         utility has been syncronized with <literal>head/</literal>.
 581         This implements binary package signature verification when
 582         bootstrapping the system with <command>pkg
 583           bootstrap</command>.</para>
 584
 585       <para revision="263042">The system timezone data files have
 586         been updated to version tzdata2014a.</para>
 587
 588       <para revision="263212">The NetBSD &man.make.1; utility,
 589         <command>bmake</command> has been imported for compatibility
 590         with the &os;&nbsp;Ports Collection.  It is installed as
 591         <command>bmake</command>, and the <command>make</command>
 592         remains the &os; version.</para>
 593
 594       <para revision="263326">The &man.fetch.3; library now
 595         supports <literal>Last-Modified</literal> timestamps which
 596         return UTC instead of GMT.</para>
 597
 598       <para revision="263404">Aliases for the &man.zfs.8; commands
 599         <literal>list -t snap</literal> and <literal>snap</literal>
 600         have been added to match &oracle;&nbsp;Solaris 11.</para>
 601
 602       <para revision="263406">A new flag, <literal>-p</literal>, has
 603         been added to the &man.zfs.8; <literal>list</literal> command,
 604         providing output in a parseable form.</para>
 605
 606       <para revision="263421"><application>OpenPAM</application> has
 607         been updated to Nummularia (20130907), which incorporates
 608         several bug fixes and documentation improvements.  The
 609         &man.openpam.ttyconv.3; library has been completely
 610         rewritten.</para>
 611
 612       <para revision="264423">The &man.sh.1; command interpreter has
 613         been updated to expand assignments after
 614         <literal>export</literal>, <literal>local</literal>, and
 615         <literal>readonly</literal> differently.  As result of this
 616         change, variable assignment such as <literal>local
 617           v=&dollar;1</literal> will assign the first positional
 618         parameter to <literal>v</literal>, even if
 619         <literal>&dollar;1</literal> contains spaces, and
 620         <literal>local w=<replaceable>~/myfile</replaceable></literal>
 621         will expand the tilde (<literal>~</literal>).</para>
 622
 623       <para revision="264699">The &man.find.1; utility has been
 624         updated to implement <literal>-ignore_readdir_race</literal>.
 625         Prior to this change, <literal>-ignore_readdir_race</literal>
 626         existed as an option for GNU &man.find.1; compatibility, and
 627         was ignored if specified.  A counter primary,
 628         <literal>-noignore_readdir_race</literal> now also exists, and
 629         is the default behavior.</para>
 630
 631       <para revision="266286">The &man.ps.1; utility has been updated
 632         to include the <literal>-J</literal> flag, used to filter
 633         output by matching &man.jail.8; IDs and names.  Additionally,
 634         argument <literal>0</literal> can be used to
 635         <literal>-J</literal> to only list processes running on the
 636         host system.</para>
 637
 638       <para revision="266287">The &man.top.1; utility has been updated
 639         to filter by &man.jail.8; ID or name, in followup to the
 640         &man.ps.1; change in <literal>r265229</literal>.</para>
 641
 642       <para revision="266818">The Blowfish &man.crypt.3; default
 643         format has been changed to
 644         <literal>&dollar;2b&dollar;</literal>.</para>
 645
 646       <para revision="267114">The default &man.newsyslog.conf.5; now
 647         includes files in the
 648         <filename>/etc/newsyslog.conf.d/</filename> and
 649         <filename>/usr/local/etc/newsyslog.conf.d/</filename>
 650         directories by default for &man.newsyslog.8;.</para>
 651
 652       <para revision="267243">A new flag, <quote>onifconsole</quote>
 653         has been added to <filename>/etc/ttys</filename>.  This allows
 654         the system to provide a login prompt via serial console if the
 655         device is an active kernel console, otherwise it is equivalent
 656         to <literal>off</literal>.</para>
 657
 658       <para revision="267379">The &man.arc4random.3; library has been
 659         updated to match that of &os;-CURRENT.</para>
 660
 661       <para revision="267411">The &man.pmcstat.8; utility has been
 662         updated to include a new flag, <literal>-l</literal>, which
 663         ends event collection after the specified number of
 664         seconds.</para>
 665
 666       <para revision="267911">The &os;&nbsp;Project has migrated
 667         from the <application>GNATS</application> bug tracking system
 668         to <application>Bugzilla</application>.  The &man.send-pr.1;
 669         utility used for submitting problem reports has been replaced
 670         with a stub shell script that instructs to use the Bugzilla
 671         web interface.</para>
 672
 673       <sect3 xml:id="periodic-scripts">
 674         <title>&man.periodic.8; Scripts</title>
 675
 676         <para revision="263662">The
 677           <filename>/etc/periodic/security/800.loginfail</filename>
 678           &man.periodic.8; script has been refined to catch more
 679           authentication failures and reduce false positives.</para>
 680       </sect3>
 681
 682       <sect3 xml:id="rc-scripts">
 683         <title>&man.rc.8; Scripts</title>
 684
 685         <para revision="256917">Support for <quote>first boot</quote>
 686           scripts has been added to &man.rc.8;.  See &man.rc.8; and
 687           &man.rc.conf.5; for implementation details.</para>
 688
 689         <para revision="260432">The &man.rc.8; system will now
 690           re-source &man.rc.conf.5; on receipt of
 691           <literal>SIGALRM</literal>.</para>
 692       </sect3>
 693     </sect2>
 694
 695     <sect2 xml:id="contrib">
 696       <title>Contributed Software</title>
 697
 698       <para revision="255934">The &man.readline.3; library has been
 699         updated to version 1.104.</para>
 700
 701       <para revision="266711"><application>Sendmail</application> has
 702         been updated to version 8.14.9.</para>
 703
 704       <para revision="262706" contrib="sponsor"
 705           sponsor="&dkhostmaster;"><application>BIND</application> has
 706         been updated to version 9.9.5.</para>
 707
 708       <para revision="263286">The &man.xz.1; utility has been updated
 709         to a post-5.0.5 snapshot.</para>
 710
 711       <para revision="263970"><application>OpenSSH</application> has
 712         been updated to version 6.6p1.</para>
 713
 714       <para revision="267285"><application>OpenSSL</application> has
 715         been updated to version 0.9.8za.</para>
 716     </sect2>
 717
 718     <sect2 xml:id="ports">
 719       <title>Ports and Packages</title>
 720
 721       <important>
 722         <para>Note to &os; desktop users: please read this section
 723           carefully, especially before upgrading ports that
 724           depend on <application>Xorg</application>.</para>
 725       </important>
 726
 727       <para>In April 2014, the &os; Ports collection switched to a
 728         newer version of <application>Xorg</application> that supports
 729         <acronym>KMS</acronym> (Kernel Mode Setting).</para>
 730
 731       <para>Users upgrading from earlier versions of &os;&nbsp;9.x or
 732         &os;&nbsp;8.x should be aware of several things regarding
 733         <application>Xorg</application>:</para>
 734
 735       <para>
 736         <itemizedlist>
 737           <listitem>
 738             <para>When applications are built from the &os; Ports
 739               Collection or installed from the <literal><link
 740                   xlink:href="https://lists.freebsd.org/pipermail/freebsd-announce/2014-July/001570.html">new_xorg</link></literal>
 741               &man.pkg.8; repository, the newer, KMS-aware version of
 742               <application>Xorg</application> is used.</para>
 743           </listitem>
 744
 745           <listitem>
 746             <para>The <acronym>KMS</acronym> version of
 747               <application>Xorg</application> does not switch back to
 748               text mode after leaving the X desktop environment, and
 749               the system console will not be visible.  The new
 750               &man.vt.4; console driver supports graphic consoles and
 751               keeps the console visible after X has exited.  The
 752               &man.vt.4; driver must be compiled into the kernel.
 753               A <filename>VT</filename> kernel configuration example
 754               file is included in &release.current;, but is not
 755               compiled or enabled by default.  See &man.vt.4; and the
 756               <link
 757                 xlink:href="https://wiki.freebsd.org/VT">vt(4) wiki
 758                 page</link> for additional information.</para>
 759           </listitem>
 760
 761           <listitem>
 762             <para>Packages for <application>KDE4</application> are not
 763               available in the default (<literal>latest</literal>)
 764               &man.pkg.8; repository, however are available in the
 765               <literal>new_xorg</literal> repository.  See the <link
 766                 xlink:href="https://lists.freebsd.org/pipermail/freebsd-announce/2014-July/001570.html">announcement
 767                 email</link> for details on how to use the
 768               <literal>new_xorg</literal> repository.</para>
 769
 770             <para>The older <application>Xorg</application> that does
 771               not support <acronym>KMS</acronym> can still be
 772               installed from the <literal>latest</literal> upstream
 773               &man.pkg.8; repository and the packages included on the
 774               &release.current; DVD.</para>
 775
 776             <para>However, it is important to note that some newer
 777               applications require the newer
 778               <application>Xorg</application>, and will not work with
 779               the old version.  The newer
 780               <application>Xorg</application> is recommended, and
 781               should be used unless not compatible with legacy
 782               graphics cards.</para>
 783
 784             <para>To continue using the old version of
 785               <application>Xorg</application> when building from the
 786               &os;&nbsp;Ports Collection, set
 787               <literal>WITHOUT_NEW_XORG=yes</literal> in
 788               &man.make.conf.5;.</para>
 789           </listitem>
 790         </itemizedlist>
 791       </para>
 792     </sect2>
 793
 794     <sect2 xml:id="releng">
 795       <title>Release Engineering and Integration</title>
 796
 797       <para revision="260891">As part of the release build, the
 798         &man.etcupdate.8; utility will bootstrap the system, allowing
 799         &man.etcupdate.8; to work after the first upgrade of a
 800         system.</para>
 801
 802       <para revision="262879" contrib="sponsor"
 803           sponsor="&ff;">The <filename>release.sh</filename>
 804         script and release <filename>Makefile</filename> have been
 805         updated to use &man.pkg.7; to populate the dvd installation
 806         medium.</para>
 807
 808       <para revision="263028">The &man.services.mkdb.8; utility has
 809         been updated to support multiple byte orders.  Similar to
 810         &man.cap.mkdb.1;, the <filename>services.db</filename> will
 811         be created with proper endinanness as part of
 812         cross-architecture release builds.</para>
 813     </sect2>
 814   </sect1>
 815
 816   <sect1 xml:id="upgrade">
 817     <title>Upgrading from Previous Releases of &os;</title>
 818
 819     <sect2>
 820       <title>Upgrading Using &man.freebsd-update.8; or a Source-Based
 821         Procedure</title>
 822
 823       <para arch="amd64,i386">Binary upgrades between RELEASE versions
 824         (and snapshots of the various security branches) are supported
 825         using the &man.freebsd-update.8; utility.  The binary upgrade
 826         procedure will update unmodified userland utilities, as well
 827         as an unmodified <filename>GENERIC</filename> kernel,
 828         distributed as a part of an official &os; release.  The
 829         &man.freebsd-update.8; utility requires that the host being
 830         upgraded have Internet connectivity.</para>
 831
 832       <para>Source-based upgrades (those based on recompiling the &os;
 833         base system from source code) from previous versions are
 834         supported using to the instructions in
 835         <filename>/usr/src/UPDATING</filename>.</para>
 836
 837       <para>For more specific information about upgrading
 838         instructions, see <uri
 839           xlink:href="http://www.FreeBSD.org/releases/9.3R/installation.html">http://www.FreeBSD.org/releases/9.3R/installation.html</uri>.</para>
 840
 841       <important>
 842         <para>Upgrading &os; should only be attempted
 843           after backing up <emphasis>all</emphasis> data and
 844           configuration files.</para>
 845       </important>
 846     </sect2>
 847
 848     <sect2>
 849       <title xml:id="upgrade-pitfalls">User-Visible
 850         Incompatibilities</title>
 851
 852       <para>&os;&nbsp;9.0 and later versions have several
 853         configuration incompatibilities with earlier versions of &os;.
 854         These differences are best understood before upgrading.
 855         <emphasis>Please read this section and the <link
 856             xlink:href="http://www.freebsd.org/releases/9.0R/relnotes-detailed.html#UPGRADE">Upgrading
 857             Section in 9.0-RELEASE Release Notes</link> carefully
 858           before submitting a problem report and/or posting a question
 859           to the &os; mailing lists.</emphasis></para>
 860     </sect2>
 861   </sect1>
 862 </article>