diff options
Diffstat (limited to 'website/content/en/releases/10.2R/relnotes.adoc')
| -rw-r--r-- | website/content/en/releases/10.2R/relnotes.adoc | 480 |
1 files changed, 480 insertions, 0 deletions
diff --git a/website/content/en/releases/10.2R/relnotes.adoc b/website/content/en/releases/10.2R/relnotes.adoc new file mode 100644 index 0000000000..2ee47cca98 --- /dev/null +++ b/website/content/en/releases/10.2R/relnotes.adoc @@ -0,0 +1,480 @@ +--- +title: "FreeBSD 10.2-RELEASE Release Notes" +sidenav: download +--- + +include::shared/en/urls.adoc[] + += FreeBSD 10.2-RELEASE Release Notes + +== Abstract + +The release notes for FreeBSD 10.2-RELEASE contain a summary of the changes made to the FreeBSD base system on the 10.2-STABLE development line. This document lists applicable security advisories that were issued since the last release, as well as significant changes to the FreeBSD kernel and userland. Some brief remarks on upgrading are also presented. + +== Table of Contents + +* <<intro,Introduction>> +* <<upgrade,Upgrading from previous releases of FreeBSD>> +* <<security-errata,Security and Errata>> +** <<security,Security Advisories>> +** <<errata,Errata Notices>> +* <<userland,Userland>> +** <<userland-config,Userland Configuration Changes>> +** <<userland-programs,Userland Application Changes>> +** <<userland-contrib,Contributed Software>> +** <<userland-installer,Installation and Configuration Tools>> +** <<userland-rc,`/etc/rc.d` Scripts>> +** <<userland-periodic,`/etc/periodic` Scripts>> +** <<userland-libraries,Runtime Libraries and API>> +** <<userland-abi,ABI Compatibility>> +* <<kernel,Kernel>> +** <<kernel-bugfix,Kernel Bug Fixes>> +** <<kernel-config,Kernel Configuration>> +** <<kernel-sysctl,System Tuning and Controls>> +* <<drivers,Devices and Drivers>> +** <<drivers-device,Device Drivers>> +** <<drivers-storage,Storage Drivers>> +** <<drivers-network,Network Drivers>> +* <<hardware,Hardware Support>> +** <<hardware-support,Hardware Support>> +** <<hardware-virtualization,Virtualization Support>> +** <<hardware-arm,ARM Support>> +* <<storage,Storage>> +** <<storage-general,General Storage>> +** <<storage-net,Networked Storage>> +** <<storage-zfs,ZFS>> +** <<storage-geom,GEOM>> +* <<boot,Boot Loader Changes>> +** <<boot-loader,Boot Loader Changes>> +* <<network,Networking>> +** <<network-protocols,Network Protocols>> +* <<ports,Ports Collection and Package Infrastructure>> +** <<ports-versions,Ports and Package Versions>> +* <<releng,Release Engineering and Integration>> +** <<releng-changes,Integration Changes>> + +[[intro]] +== Introduction + +This document contains the release notes for FreeBSD 10.2-RELEASE. It describes recently added, changed, or deleted features of FreeBSD. It also provides some notes on upgrading from previous versions of FreeBSD. + +This distribution of FreeBSD 10.2-RELEASE is a release distribution. It can be found at `https://www.FreeBSD.org/releases/` or any of its mirrors. More information on obtaining this (or other) release distributions of FreeBSD can be found in the link:{handbook}#mirrors[Obtaining FreeBSD' appendix] to the link:{handbook}[FreeBSD Handbook]. + +All users are encouraged to consult the release errata before installing FreeBSD. The errata document is updated with "late-breaking" information discovered late in the release cycle or after the release. Typically, it contains information on known bugs, security advisories, and corrections to documentation. An up-to-date copy of the errata for FreeBSD 10.2-RELEASE can be found on the FreeBSD Web site. + +This document describes the most user-visible new or changed features in FreeBSD since 10.1-RELEASE. + +Typical release note items document recent security advisories issued after 10.1-RELEASE, new drivers or hardware support, new commands or options, major bug fixes, or contributed software upgrades. They may also list changes to major ports/packages or release engineering practices. Clearly the release notes cannot list every single change made to FreeBSD between releases; this document focuses primarily on security advisories, user-visible changes, and major architectural improvements. + +[[upgrade]] +== Upgrading from Previous Releases of FreeBSD + +[amd64,i386] Binary upgrades between RELEASE versions (and snapshots of the various security branches) are supported using the http://www.FreeBSD.org/cgi/man.cgi?query=freebsd-update&sektion=8[freebsd-update(8)] utility. The binary upgrade procedure will update unmodified userland utilities, as well as unmodified `GENERIC` kernel distributed as a part of an official FreeBSD release. The http://www.FreeBSD.org/cgi/man.cgi?query=freebsd-update&sektion=8[freebsd-update(8)] utility requires that the host being upgraded have Internet connectivity. + +Source-based upgrades (those based on recompiling the FreeBSD base system from source code) from previous versions are supported, according to the instructions in [.filename]`/usr/src/UPDATING`. + +[.important] +*Important*: + +Upgrading FreeBSD should only be attempted after backing up _all_ data and configuration files. + +[[security-errata]] +== Security and Errata + +This section lists the various Security Advisories and Errata Notices since 10.1-RELEASE. + +[[security]] +== Security Advisories + +[width="100%",cols="40%,30%,30%",options="header",] +|=== +|Advisory |Date |Topic +|https://www.FreeBSD.org/security/advisories/FreeBSD-SA-14:27.stdio.asc[FreeBSD-SA-14:27.stdio] |10 December 2014 |Buffer overflow in stdio +|https://www.FreeBSD.org/security/advisories/FreeBSD-SA-14:28.file.asc[FreeBSD-SA-14:28.file] |10 December 2014 |Multiple vulnerabilities in http://www.FreeBSD.org/cgi/man.cgi?query=file&sektion=1[file(1)] and http://www.FreeBSD.org/cgi/man.cgi?query=libmagic&sektion=3[libmagic(3)] +|https://www.FreeBSD.org/security/advisories/FreeBSD-SA-14:30.unbound.asc[FreeBSD-SA-14:30.unbound] |17 December 2014 |Remote denial of service vulnerability +|https://www.FreeBSD.org/security/advisories/FreeBSD-SA-14:31.ntp.asc[FreeBSD-SA-14:31.ntp] |23 December 2014 |Multiple vulnerabilities in NTP suite +|https://www.FreeBSD.org/security/advisories/FreeBSD-SA-15:01.openssl.asc[FreeBSD-SA-15:01.openssl] |14 January 2015 |Multiple vulnerabilities in OpenSSL +|https://www.FreeBSD.org/security/advisories/FreeBSD-SA-15:02.kmem.asc[FreeBSD-SA-15:02.kmem] |27 January 2015 |SCTP kernel memory corruption and disclosure vulnerability +|https://www.FreeBSD.org/security/advisories/FreeBSD-SA-15:03.sctp.asc[FreeBSD-SA-15:03.sctp] |27 January 2015 |SCTP stream reset vulnerability +|https://www.FreeBSD.org/security/advisories/FreeBSD-SA-15:04.igmp.asc[FreeBSD-SA-15:04.igmp] |25 February 2015 |Integer overflow in IGMP protocol +|https://www.FreeBSD.org/security/advisories/FreeBSD-SA-15:06.openssl.asc[FreeBSD-SA-15:06.openssl] |19 March 2015 |Multiple vulnerabilities +|https://www.FreeBSD.org/security/advisories/FreeBSD-SA-15:07.ntp.asc[FreeBSD-SA-15:07.ntp] |7 April 2015 |Multiple vulnerabilities +|https://www.FreeBSD.org/security/advisories/FreeBSD-SA-15:08.bsdinstall.asc[FreeBSD-SA-15:08.bsdinstall] |7 April 2015 |Insecure default GELI key file permissions +|https://www.FreeBSD.org/security/advisories/FreeBSD-SA-15:09.ipv6.asc[FreeBSD-SA-15:09.ipv6] |7 April 2015 |Router advertisement Denial of Service +|https://www.FreeBSD.org/security/advisories/FreeBSD-SA-15:10.openssl.asc[FreeBSD-SA-15:10.openssl] |16 June 2015 |Multiple vulnerabilities +|https://www.FreeBSD.org/security/advisories/FreeBSD-SA-15:12.openssl.asc[FreeBSD-SA-15:12.openssl] |9 July 2015 |OpenSSL alternate chains certificate forgery vulnerability (Note: This does not affect FreeBSD 10.1-RELEASE) +|https://www.FreeBSD.org/security/advisories/FreeBSD-SA-15:13.tcp.asc[FreeBSD-SA-15:13.tcp] |21 July 2015 |resource exhaustion due to sessions stuck in `LAST_ACK` state. +|https://www.FreeBSD.org/security/advisories/FreeBSD-SA-15:14.bsdpatch.asc[FreeBSD-SA-15:14.bsdpatch] |28 July 2015 |Shell injection vulnerability +|https://www.FreeBSD.org/security/advisories/FreeBSD-SA-15:15.tcp.asc[FreeBSD-SA-15:15.tcp] |28 July 2015 |resource exhaustion in TCP reassembly +|https://www.FreeBSD.org/security/advisories/FreeBSD-SA-15:16.openssh.asc[FreeBSD-SA-15:16.openssh] |28 July 2015 |Multiple vulnerabilities +|https://www.FreeBSD.org/security/advisories/FreeBSD-SA-15:18.bsdpatch.asc[FreeBSD-SA-15:18.bsdpatch] |5 August 2015 |Shell injection vulnerability +|https://www.FreeBSD.org/security/advisories/FreeBSD-SA-15:19.routed.asc[FreeBSD-SA-15:19.routed] |5 August 2015 |Remote denial of service vulnerability +|=== + +[[errata]] +== Errata Notices + +[width="100%",cols="40%,30%,30%",options="header",] +|=== +|Errata |Date |Topic +|https://www.FreeBSD.org/security/advisories/FreeBSD-EN-14:13.freebsd-update.asc[FreeBSD-EN-14:13.freebsd-update] |23 December 2014 |Fixed directory deletion issue in http://www.FreeBSD.org/cgi/man.cgi?query=freebsd-update&sektion=8[freebsd-update(8)] +|https://www.FreeBSD.org/security/advisories/FreeBSD-EN-15:01.vt.asc[FreeBSD-EN-15:01.vt] |25 February 2015 |http://www.FreeBSD.org/cgi/man.cgi?query=vt&sektion=4[vt(4)] crash with improper ioctl parameters +|https://www.FreeBSD.org/security/advisories/FreeBSD-EN-15:02.openssl.asc[FreeBSD-EN-15:02.openssl] |25 February 2015 |OpenSSL update +|https://www.FreeBSD.org/security/advisories/FreeBSD-EN-15:03.freebsd-update.asc[FreeBSD-EN-15:03.freebsd-update] |25 February 2015 |http://www.FreeBSD.org/cgi/man.cgi?query=freebsd-update&sektion=8[freebsd-update(8)] updates libraries in suboptimal order +|https://www.FreeBSD.org/security/advisories/FreeBSD-EN-15:04.freebsd-update.asc[FreeBSD-EN-15:04.freebsd-update] |13 May 2015 |http://www.FreeBSD.org/cgi/man.cgi?query=freebsd-update&sektion=8[freebsd-update(8)] does not ensure the previous upgrade has completed +|https://www.FreeBSD.org/security/advisories/FreeBSD-EN-15:05.ufs.asc[FreeBSD-EN-15:05.ufs] |13 May 2015 |Deadlock on reboot with UFS tuned with SU+J +|https://www.FreeBSD.org/security/advisories/FreeBSD-EN-15:06.file.asc[FreeBSD-EN-15:06.file] |9 June 2015 |Multiple denial of service issues +|https://www.FreeBSD.org/security/advisories/FreeBSD-EN-15:07.zfs.asc[FreeBSD-EN-15:07.zfs] |9 June 2015 |ZFS reliability improvements +|https://www.FreeBSD.org/security/advisories/FreeBSD-EN-15:08.sendmail.asc[FreeBSD-EN-15:08.sendmail] |30 June 2015 (revised) |Sendmail TLS/DH interoperability improvement +|https://www.FreeBSD.org/security/advisories/FreeBSD-EN-15:09.xlocale.asc[FreeBSD-EN-15:09.xlocale] |30 June 2015 |Fix inconsistency between locale and rune locale states +|https://www.FreeBSD.org/security/advisories/FreeBSD-EN-15:10.iconv.asc[FreeBSD-EN-15:10.iconv] |30 June 2015 |Improved http://www.FreeBSD.org/cgi/man.cgi?query=iconv&sektion=3[iconv(3)] UTF-7 support +|=== + +[[userland]] +== Userland + +This section covers changes and additions to userland applications, contributed software, and system utilities. + +[[userland-config]] +== Userland Configuration Changes + +The http://www.FreeBSD.org/cgi/man.cgi?query=termcap&sektion=5[termcap(5)] file is installed as-is from sources, instead of reordering, creating [.filename]`/etc/termcap.db` by default, providing a performance improvements to applications that use the http://www.FreeBSD.org/cgi/man.cgi?query=termcap&sektion=5[termcap(5)] database, such as http://www.FreeBSD.org/cgi/man.cgi?query=vi&sektion=1[vi(1)] and http://www.FreeBSD.org/cgi/man.cgi?query=ncurses&sektion=3[ncurses(3)]. http://svn.freebsd.org/viewvc/base?view=revision&revision=276991[(r276991)] + +[[userland-programs]] +== Userland Application Changes + +A new utility, http://www.FreeBSD.org/cgi/man.cgi?query=dpv&sektion=1[dpv(1)], has been added to the base system, providing a http://www.FreeBSD.org/cgi/man.cgi?query=dialog&sektion=1[dialog(1)]-style progress view from one or more input streams. A corresponding library, http://www.FreeBSD.org/cgi/man.cgi?query=dpv&sektion=3[dpv(3)], has also been added. http://svn.freebsd.org/viewvc/base?view=revision&revision=275040[(r275040)] + +The http://www.FreeBSD.org/cgi/man.cgi?query=elfdump&sektion=1[elfdump(1)] utility has been updated to support capability mode provided by http://www.FreeBSD.org/cgi/man.cgi?query=capsicum&sektion=4[capsicum(4)]. http://svn.freebsd.org/viewvc/base?view=revision&revision=275945[(r275945)] + +The http://www.FreeBSD.org/cgi/man.cgi?query=fstyp&sektion=8[fstyp(8)] utility has been added, which is used to determine the filesystem on a specified device. http://svn.freebsd.org/viewvc/base?view=revision&revision=277434[(r277434)] [.contrib]#(Sponsored by The FreeBSD Foundation)# + +The http://www.FreeBSD.org/cgi/man.cgi?query=mkimg&sektion=1[mkimg(1)] utility has been updated to support the MBR EFI partition type. http://svn.freebsd.org/viewvc/base?view=revision&revision=278968[(r278968)] [.contrib]#(Sponsored by The FreeBSD Foundation)# + +A regression in the http://www.FreeBSD.org/cgi/man.cgi?query=libarchive&sektion=3[libarchive(3)] library that would prevent a directory from being included in the archive when `--one-file-system` is used has been fixed. http://svn.freebsd.org/viewvc/base?view=revision&revision=281044[(r281044)] + +The http://www.FreeBSD.org/cgi/man.cgi?query=netstat&sektion=8[netstat(8)] utility has been updated to include a new flag, `-R`, which is used to dump RSS/flow information. http://svn.freebsd.org/viewvc/base?view=revision&revision=281161[(r281161)] [.contrib]#(Sponsored by Limelight Networks)# + +The http://www.FreeBSD.org/cgi/man.cgi?query=ar&sektion=1[ar(1)] utility has been updated to set `ARCHIVE_EXTRACT_SECURE_SYMLINKS` and `ARCHIVE_EXTRACT_SECURE_NODOTDOT` to disallow directory traversal when extracting an archive, similar to http://www.FreeBSD.org/cgi/man.cgi?query=tar&sektion=1[tar(1)]. http://svn.freebsd.org/viewvc/base?view=revision&revision=281936[(r281936)] [.contrib]#(Sponsored by The FreeBSD Foundation)# + +A race condition in http://www.FreeBSD.org/cgi/man.cgi?query=wc&sektion=1[wc(1)] that would cause final results to be sent to http://www.FreeBSD.org/cgi/man.cgi?query=stderr&sektion=4[stderr(4)] when receiving the `SIGINFO` signal has been fixed. http://svn.freebsd.org/viewvc/base?view=revision&revision=282278[(r282278)] + +The http://www.FreeBSD.org/cgi/man.cgi?query=freebsd-update&sektion=8[freebsd-update(8)] utility has been updated to prevent fetching updated binary patches when a previous upgrade has not been thoroughly completed. http://svn.freebsd.org/viewvc/base?view=revision&revision=282870[(r282870)] [.contrib]#(Sponsored by ScaleEngine, Inc.)# + +The http://www.FreeBSD.org/cgi/man.cgi?query=uefisign&sektion=8[uefisign(8)] utility has been added. http://svn.freebsd.org/viewvc/base?view=revision&revision=282974[(r282974)] [.contrib]#(Sponsored by The FreeBSD Foundation)# + +The http://www.FreeBSD.org/cgi/man.cgi?query=chflags&sektion=1[chflags(1)], http://www.FreeBSD.org/cgi/man.cgi?query=chgrp&sektion=1[chgrp(1)], http://www.FreeBSD.org/cgi/man.cgi?query=chmod&sektion=1[chmod(1)], and http://www.FreeBSD.org/cgi/man.cgi?query=chown&sektion=8[chown(8)] utilities now affect symbolic links when the `-R` flag is specified, as documented in http://www.FreeBSD.org/cgi/man.cgi?query=symlink&sektion=7[symlink(7)]. http://svn.freebsd.org/viewvc/base?view=revision&revision=283875[(r283875)] [.contrib]#(Sponsored by Multiplay)# + +The http://www.FreeBSD.org/cgi/man.cgi?query=date&sektion=1[date(1)] utility has been updated to print the modification time of the file passed as an argument to the `-r` flag, improving compatibility with the GNU http://www.FreeBSD.org/cgi/man.cgi?query=date&sektion=1[date(1)] utility behavior. http://svn.freebsd.org/viewvc/base?view=revision&revision=283258[(r283258)] + +The http://www.FreeBSD.org/cgi/man.cgi?query=mkimg&sektion=1[mkimg(1)] utility has been updated to include a new flag, `-c`, which allows specifying the capacity of the target disk image. http://svn.freebsd.org/viewvc/base?view=revision&revision=284523[(r284523)] + +The http://www.FreeBSD.org/cgi/man.cgi?query=pw&sektion=8[pw(8)] utility has been updated with a new flag, `-R`, that sets the root directory within which the utility will operate. http://svn.freebsd.org/viewvc/base?view=revision&revision=285092[(r285092)] + +[[userland-contrib]] +== Contributed Software + +The http://www.FreeBSD.org/cgi/man.cgi?query=resolvconf&sektion=8[resolvconf(8)] utility has been updated to version 3.7.0. http://svn.freebsd.org/viewvc/base?view=revision&revision=282746[(r282746)] [.contrib]#(Sponsored by The FreeBSD Foundation)# + +The http://www.FreeBSD.org/cgi/man.cgi?query=nc&sektion=1[nc(1)] utility has been updated to the OpenBSD 5.7 version. http://svn.freebsd.org/viewvc/base?view=revision&revision=283270[(r283270)] + +Timezone data files have been updated to version 2015e. http://svn.freebsd.org/viewvc/base?view=revision&revision=284398[(r284398)] + +The http://www.FreeBSD.org/cgi/man.cgi?query=acpi&sektion=4[acpi(4)] subsystem has been updated to version 20150515. http://svn.freebsd.org/viewvc/base?view=revision&revision=284460[(r284460)] + +The http://www.FreeBSD.org/cgi/man.cgi?query=file&sektion=1[file(1)] utility has been updated to version 5.23. http://svn.freebsd.org/viewvc/base?view=revision&revision=284778[(r284778)] + +The http://www.FreeBSD.org/cgi/man.cgi?query=unbound&sektion=8[unbound(8)] utility has been updated to version 1.5.3. http://svn.freebsd.org/viewvc/base?view=revision&revision=285206[(r285206)] + +The sendmail utility has been updated to version 8.15.2. http://svn.freebsd.org/viewvc/base?view=revision&revision=285305[(r285305)] + +OpenSSL has been updated to version 1.0.1p. http://svn.freebsd.org/viewvc/base?view=revision&revision=285330[(r285330)] + +The ntp suite has been updated to version 4.2.8p3. http://svn.freebsd.org/viewvc/base?view=revision&revision=285612[(r285612)] + +The http://www.FreeBSD.org/cgi/man.cgi?query=ssh&sektion=1[ssh(1)] utility has been updated to re-implement hostname canonicalization before locating the host in [.filename]`known_hosts`. http://svn.freebsd.org/viewvc/base?view=revision&revision=285750[(r285750)] [.contrib]#(Sponsored by Dell, Inc.)# + +The http://www.FreeBSD.org/cgi/man.cgi?query=tar&sektion=1[tar(1)] utility has been updated to fix an issue that would prevent compressing sparse files. http://svn.freebsd.org/viewvc/base?view=revision&revision=286084[(r286084)] + +[[userland-installer]] +== Installation and Configuration Tools + +Support for detecting and implementing a workaround for various laptops and motherboards that do not boot properly from GPT-partitioned disks has been added to http://www.FreeBSD.org/cgi/man.cgi?query=bsdinstall&sektion=8[bsdinstall(8)]. Additionally, the `active` flag will be set on the partition when needed. http://svn.freebsd.org/viewvc/base?view=revision&revision=285769[(r285769)] [.contrib]#(Sponsored by ScaleEngine, Inc.)# + +Support for detecting and implementing aligning partitions on 1Mb boundaries has been added to http://www.FreeBSD.org/cgi/man.cgi?query=bsdinstall&sektion=8[bsdinstall(8)]. http://svn.freebsd.org/viewvc/base?view=revision&revision=285721[(r285721)] [.contrib]#(Sponsored by ScaleEngine, Inc.)# + +Support for selecting the partitioning scheme when installing on the UFS filesystem has been added to http://www.FreeBSD.org/cgi/man.cgi?query=bsdinstall&sektion=8[bsdinstall(8)]. http://svn.freebsd.org/viewvc/base?view=revision&revision=285769[(r285769)] [.contrib]#(Sponsored by ScaleEngine, Inc.)# + +[[userland-rc]] +== [.filename]`/etc/rc.d` Scripts + +A new http://www.FreeBSD.org/cgi/man.cgi?query=rc&sektion=8[rc(8)] script, [.filename]`growfs`, has been added, which will resize the root filesystem on boot if [.filename]`/firstboot` exists. http://svn.freebsd.org/viewvc/base?view=revision&revision=284009[(r284009)] + +[[userland-periodic]] +== [.filename]`/etc/periodic` Scripts + +A new http://www.FreeBSD.org/cgi/man.cgi?query=periodic&sektion=8[periodic(8)] script, [.filename]`510.status-world-kernel`, has been added, which evaluates the running userland and kernel versions from the http://www.FreeBSD.org/cgi/man.cgi?query=uname&sektion=1[uname(1)] `-U` and `-K` arguments, and prints an error if the system userland and kernel are not in sync. http://svn.freebsd.org/viewvc/base?view=revision&revision=277520[(r277520)] [.contrib]#(Sponsored by The FreeBSD Foundation)# + +[[userland-libraries]] +== Runtime Libraries and API + +A new file configuration library, http://www.FreeBSD.org/cgi/man.cgi?query=figpar&sektion=3[figpar(3)], has been added to the base system. http://svn.freebsd.org/viewvc/base?view=revision&revision=275040[(r275040)] + +The http://www.FreeBSD.org/cgi/man.cgi?query=procctl&sektion=2[procctl(2)] system call has been updated to include a facility for non http://www.FreeBSD.org/cgi/man.cgi?query=init&sektion=8[init(8)] processes to be declared as the reaper of child processes and their decendants. http://svn.freebsd.org/viewvc/base?view=revision&revision=276686[(r276686)] [.contrib]#(Sponsored by The FreeBSD Foundation)# + +The http://www.FreeBSD.org/cgi/man.cgi?query=setmode&sektion=3[setmode(3)] function has been updated to consistently set `errno` on failure. http://svn.freebsd.org/viewvc/base?view=revision&revision=280392[(r280392)] + +[[userland-abi]] +== ABI Compatibility + +The Linux(R) compatibility version has been updated to `2.6.18`. The `compat.linux.osrelease` http://www.FreeBSD.org/cgi/man.cgi?query=sysctl&sektion=8[sysctl(8)] is evaluated when building the `emulators/linux-c6` and related ports. http://svn.freebsd.org/viewvc/base?view=revision&revision=275807[(r275807)] + +[[kernel]] +== Kernel + +This section covers changes to kernel configurations, system tuning, and system control parameters that are not otherwise categorized. + +[[kernel-bugfix]] +== Kernel Bug Fixes + +A kernel panic triggered when destroying a http://www.FreeBSD.org/cgi/man.cgi?query=vnet&sektion=9[vnet(9)] http://www.FreeBSD.org/cgi/man.cgi?query=jail&sektion=8[jail(8)] configured with http://www.FreeBSD.org/cgi/man.cgi?query=gif&sektion=4[gif(4)] has been fixed. http://svn.freebsd.org/viewvc/base?view=revision&revision=276068[(r276068)] + +A kernel panic triggered when destroying a http://www.FreeBSD.org/cgi/man.cgi?query=vnet&sektion=9[vnet(9)] http://www.FreeBSD.org/cgi/man.cgi?query=jail&sektion=8[jail(8)] configured with http://www.FreeBSD.org/cgi/man.cgi?query=gre&sektion=4[gre(4)] has been fixed. http://svn.freebsd.org/viewvc/base?view=revision&revision=284018[(r284018)] + +[[kernel-config]] +== Kernel Configuration + +The `PAE_TABLES` kernel configuration option has been added for FreeBSD/i386, which instructs http://www.FreeBSD.org/cgi/man.cgi?query=pmap&sektion=9[pmap(9)] to use PAE format for page tables while maintaining a 32-bit physical address size elsewhere in the kernel. The use of this option can enhance application-level security by enabling the creation of "no execute" mappings on modern i386 processors. Unlike the `PAE` option, `PAE_TABLES` preserves kernel binary interface (KBI) compatibility with non-`PAE` kernels, allowing non-`PAE` kernel modules and drivers to work with a `PAE_TABLES`-enabled kernel. Additionally, system limits are tuned for 4GB maximum RAM, avoiding kernel virtual address space (KVA) exhaustion. http://svn.freebsd.org/viewvc/base?view=revision&revision=282065[(r282065)] [.contrib]#(Sponsored by The FreeBSD Foundation)# + +The `SIFTR` kernel configuration has been added, allowing building http://www.FreeBSD.org/cgi/man.cgi?query=siftr&sektion=4[siftr(4)] statically into the kernel. http://svn.freebsd.org/viewvc/base?view=revision&revision=282826[(r282826)] + +[amd64,i386] The http://www.FreeBSD.org/cgi/man.cgi?query=nvd&sektion=4[nvd(4)] and http://www.FreeBSD.org/cgi/man.cgi?query=nvme&sektion=4[nvme(4)] drivers are now included in the `GENERIC` kernel configuration by default. http://svn.freebsd.org/viewvc/base?view=revision&revision=283076[(r283076)] [.contrib]#(Sponsored by Intel Corporation)# + +[arm] The arm boot loader, [.filename]`ubldr`, is now relocatable. In addition, [.filename]`ubldr.bin` is now created during build time, which is a stripped binary with an entry point of `0`, providing the ability to specify the load address by running `go ${loadaddr}` in `u-boot`. http://svn.freebsd.org/viewvc/base?view=revision&revision=283505[(r283505)] + +[arm] A new module for creating [.filename]`rpi.dtb` has been added for the Raspberry Pi. http://svn.freebsd.org/viewvc/base?view=revision&revision=284094[(r284094)] + +[arm] The [.filename]`rpi.dtb` module is now installed to [.filename]`/boot/dtb/` by default for the Raspberry Pi system. http://svn.freebsd.org/viewvc/base?view=revision&revision=284094[(r284094)] + +[arm] A new module for creating the [.filename]`dtb` module for AM335x systems has been added. http://svn.freebsd.org/viewvc/base?view=revision&revision=284096[(r284096)] + +A new kernel configuration option, `EM_MULTIQUEUE`, has been added which enables multi-queue support in the http://www.FreeBSD.org/cgi/man.cgi?query=em&sektion=4[em(4)] driver. http://svn.freebsd.org/viewvc/base?view=revision&revision=284522[(r284522)] [.contrib]#(Sponsored by Limelight Networks)# + +[.note] +*Note*: + +Multi-queue support in the http://www.FreeBSD.org/cgi/man.cgi?query=em&sektion=4[em(4)] driver is not officially supported by Intel(R). + +[[kernel-sysctl]] +== System Tuning and Controls + +Throttling via ACPI and P4TCC via http://www.FreeBSD.org/cgi/man.cgi?query=device.hints&sektion=5[device.hints(5)] have been turned off by default. http://svn.freebsd.org/viewvc/base?view=revision&revision=276986[(r276986)] + +The http://www.FreeBSD.org/cgi/man.cgi?query=hwpmc&sektion=4[hwpmc(4)] default and maximum callchain depths have been increased. The default has been increased from 16 to 32, and the maximum increased from 32 to 128. http://svn.freebsd.org/viewvc/base?view=revision&revision=278982[(r278982)] [.contrib]#(Sponsored by The FreeBSD Foundation)# + +The http://www.FreeBSD.org/cgi/man.cgi?query=devfs&sektion=5[devfs(5)] device filesystem has been changed to update timestamps for read/write operations using seconds precision. A new http://www.FreeBSD.org/cgi/man.cgi?query=sysctl&sektion=8[sysctl(8)], `vfs.devfs.dotimes` has been added, which when set to a non-zero value, enables default precision timestamps for these operations. http://svn.freebsd.org/viewvc/base?view=revision&revision=281255[(r281255)] [.contrib]#(Sponsored by iXsystems, The FreeBSD Foundation)# + +The `kern.osrelease` and `kern.osreldate` are now configurable http://www.FreeBSD.org/cgi/man.cgi?query=jail&sektion=8[jail(8)] parameters. http://svn.freebsd.org/viewvc/base?view=revision&revision=280632[(r280632)] + +A new http://www.FreeBSD.org/cgi/man.cgi?query=sysctl&sektion=8[sysctl(8)], `kern.racct.enable`, has been added, which when set to a non-zero value allows using http://www.FreeBSD.org/cgi/man.cgi?query=rctl&sektion=8[rctl(8)] with the `GENERIC` kernel. A new kernel configuration option, `RACCT_DISABLED` has also been added. http://svn.freebsd.org/viewvc/base?view=revision&revision=284665[(r284665)] [.contrib]#(Sponsored by The FreeBSD Foundation)# + +The `GENERIC` kernel configuration now includes `RACCT` and `RCTL` by default. http://svn.freebsd.org/viewvc/base?view=revision&revision=284665[(r284665)] [.contrib]#(Sponsored by The FreeBSD Foundation)# + +[.note] +*Note*: + +To enable `RACCT` and `RCTL` on a system using the `GENERIC` kernel configuration, add `kern.racct.enable=1` to http://www.FreeBSD.org/cgi/man.cgi?query=loader.conf&sektion=5[loader.conf(5)], and reboot the system. + +[[drivers]] +== Devices and Drivers + +This section covers changes and additions to devices and device drivers since 10.1-RELEASE. + +[[drivers-device]] +== Device Drivers + +The `drm` code has been updated to match Linux(R) version 3.8.13. http://svn.freebsd.org/viewvc/base?view=revision&revision=282199[(r282199)] + +The http://www.FreeBSD.org/cgi/man.cgi?query=psm&sektion=4[psm(4)] driver has been updated to include improved support for newer Synaptics(R) touchpads and the ClickPad(R) mouse on newer Lenovo(TM) laptops. http://svn.freebsd.org/viewvc/base?view=revision&revision=281708[(r281708)] + +[[drivers-storage]] +== Storage Drivers + +The http://www.FreeBSD.org/cgi/man.cgi?query=mpr&sektion=4[mpr(4)] driver has been updated to version 9.255.01.00-fbsd. http://svn.freebsd.org/viewvc/base?view=revision&revision=283990[(r283990)] + +The http://www.FreeBSD.org/cgi/man.cgi?query=hpt27xx&sektion=4[hpt27xx(4)] driver has been updated to version 1.2.7. http://svn.freebsd.org/viewvc/base?view=revision&revision=284879[(r284879)] + +The http://www.FreeBSD.org/cgi/man.cgi?query=hptnr&sektion=4[hptnr(4)] driver has been updated to version 1.1.4. http://svn.freebsd.org/viewvc/base?view=revision&revision=284935[(r284935)] + +[[drivers-network]] +== Network Drivers + +The http://www.FreeBSD.org/cgi/man.cgi?query=pf&sektion=4[pf(4)] interface default hash has been changed from `Jenkins` to `Murmur3`, providing a 3-percent performance increase in packets-per-second. http://svn.freebsd.org/viewvc/base?view=revision&revision=274486[(r274486)] + +The http://www.FreeBSD.org/cgi/man.cgi?query=ral&sektion=4[ral(4)] driver has been updated to support the RT5390 and RT5392 chipsets. http://svn.freebsd.org/viewvc/base?view=revision&revision=279157[(r279157)] + +The http://www.FreeBSD.org/cgi/man.cgi?query=gre&sektion=4[gre(4)] driver has been significantly overhauled, and has been split into two separate modules, http://www.FreeBSD.org/cgi/man.cgi?query=gre&sektion=4[gre(4)] and http://www.FreeBSD.org/cgi/man.cgi?query=me&sektion=4[me(4)]. http://svn.freebsd.org/viewvc/base?view=revision&revision=284066[(r284066)] [.contrib]#(Sponsored by Yandex LLC)# + +The http://www.FreeBSD.org/cgi/man.cgi?query=vxlan&sektion=4[vxlan(4)] driver has been added, which creates a virtual Layer 2 (Ethernet) network overlaid in a Layer 3 (IP/UDP) network. The http://www.FreeBSD.org/cgi/man.cgi?query=vxlan&sektion=4[vxlan(4)] driver is analogous to http://www.FreeBSD.org/cgi/man.cgi?query=vlan&sektion=4[vlan(4)], but is designed to be better suited for large, multiple-tenant datacenter environments. http://svn.freebsd.org/viewvc/base?view=revision&revision=284365[(r284365)] + +The http://www.FreeBSD.org/cgi/man.cgi?query=cdce&sektion=4[cdce(4)] driver has been updated to include support for the RTL8153 chipset. http://svn.freebsd.org/viewvc/base?view=revision&revision=284499[(r284499)] + +The http://www.FreeBSD.org/cgi/man.cgi?query=sfxge&sektion=4[sfxge(4)] driver has been updated to support Solarflare Flareon Ultra 7000-series chipsets. http://svn.freebsd.org/viewvc/base?view=revision&revision=284555[(r284555)] [.contrib]#(Sponsored by Solarflare Communications, Inc.)# + +[[hardware]] +== Hardware Support + +This section covers general hardware support for physical machines, hypervisors, and virtualization environments, as well as hardware changes and updates that do not otherwise fit in other sections of this document. + +[[hardware-support]] +== Hardware Support + +The http://www.FreeBSD.org/cgi/man.cgi?query=uart&sektion=4[uart(4)] driver has been updated to include support for the AMT serial interface found on the Lenovo(R) ThinkPad(TM) T61. http://svn.freebsd.org/viewvc/base?view=revision&revision=278407[(r278407)] + +The http://www.FreeBSD.org/cgi/man.cgi?query=uart&sektion=4[uart(4)] driver has been updated to include support for the AMT serial interface found on the Lenovo(R) ThinkPad(TM) T400. http://svn.freebsd.org/viewvc/base?view=revision&revision=279924[(r279924)] + +The http://www.FreeBSD.org/cgi/man.cgi?query=snd_hda&sektion=4[snd_hda(4)] driver has been updated to support the Lenovo(R) ThinkPad(TM) X1 20BS model. http://svn.freebsd.org/viewvc/base?view=revision&revision=281963[(r281963)] + +[[hardware-virtualization]] +== Virtualization Support + +The http://www.FreeBSD.org/cgi/man.cgi?query=virtio_console&sektion=4[virtio_console(4)] driver has been added, which provides an interface to VirtIO console devices through a http://www.FreeBSD.org/cgi/man.cgi?query=tty&sektion=4[tty(4)] device. http://svn.freebsd.org/viewvc/base?view=revision&revision=275273[(r275273)] + +The http://www.FreeBSD.org/cgi/man.cgi?query=bhyve&sektion=8[bhyve(8)] hypervisor has been updated to support AMD(R) processors with SVM and AMD-V hardware extensions. http://svn.freebsd.org/viewvc/base?view=revision&revision=276403[(r276403)] + +The http://www.FreeBSD.org/cgi/man.cgi?query=bhyve&sektion=8[bhyve(8)] hypervisor has been updated to support `DSM TRIM` commands for virtual AHCI disks. http://svn.freebsd.org/viewvc/base?view=revision&revision=280370[(r280370)] + +The Hyper-V(TM) drivers have been updated with several enhancements: http://svn.freebsd.org/viewvc/base?view=revision&revision=283280[(r283280)] [.contrib]#(Sponsored by Microsoft Open Source Technology Center)# + +* The http://www.FreeBSD.org/cgi/man.cgi?query=hv_vmbus&sektion=4[hv_vmbus(4)] driver now has multi-channel support. +* The http://www.FreeBSD.org/cgi/man.cgi?query=hv_storvsc&sektion=4[hv_storvsc(4)] driver now has scatter/gather support, in addition to performance improvements. +* The http://www.FreeBSD.org/cgi/man.cgi?query=hv_kvp&sektion=4[hv_kvp(4)] driver has received several bug fixes. + +The http://www.FreeBSD.org/cgi/man.cgi?query=hv_netvsc&sektion=4[hv_netvsc(4)] driver has been updated to support checksum offloading and TSO. http://svn.freebsd.org/viewvc/base?view=revision&revision=285236[(r285236)] [.contrib]#(Sponsored by Microsoft Open Source Technology Center)# + +[[hardware-arm]] +== ARM Support + +Support to turn off the BeagleBone Black system with the http://www.FreeBSD.org/cgi/man.cgi?query=shutdown&sektion=8[shutdown(8)] `-p` flag or by invoking http://www.FreeBSD.org/cgi/man.cgi?query=poweroff&sektion=8[poweroff(8)] has been added. http://svn.freebsd.org/viewvc/base?view=revision&revision=278079[(r278079)] + +Support for the Exynos 5420 Octa system has been added. http://svn.freebsd.org/viewvc/base?view=revision&revision=278599[(r278599)] + +The SMP option has been enabled for all Exynos 5 systems supported by FreeBSD. http://svn.freebsd.org/viewvc/base?view=revision&revision=278599[(r278599)] + +The `bcm2835_cpufreq` driver has been added, which supports CPU frequency and voltage control on the Raspberry Pi SOC. http://svn.freebsd.org/viewvc/base?view=revision&revision=278608[(r278608)] + +Support for the Toradex Apalis i.MX6 development board has been added. http://svn.freebsd.org/viewvc/base?view=revision&revision=283500[(r283500)] + +Audio transmission drivers have been added for Digital Audio Multiplexer (AUDMUXM), Smart Direct Memory Access Controller (SDMA), and Syncronous Serial Interface (SSI). http://svn.freebsd.org/viewvc/base?view=revision&revision=283500[(r283500)] + +[[storage]] +== Storage + +This section covers changes and additions to file systems and other storage subsystems, both local and networked. + +[[storage-general]] +== General Storage + +The http://www.FreeBSD.org/cgi/man.cgi?query=ctl&sektion=4[ctl(4)] LUN mapping has been rewritten, replacing iSCSI-specific mapping mechanisms with a new mechanism that works for any port. http://svn.freebsd.org/viewvc/base?view=revision&revision=279002[(r279002)] [.contrib]#(Sponsored by iXsystems)# + +The http://www.FreeBSD.org/cgi/man.cgi?query=ctld&sektion=8[ctld(8)] utility has been updated to allow controlling non-iSCSI http://www.FreeBSD.org/cgi/man.cgi?query=ctl&sektion=4[ctl(4)] ports. http://svn.freebsd.org/viewvc/base?view=revision&revision=279055[(r279055)] [.contrib]#(Sponsored by iXsystems)# + +The http://www.FreeBSD.org/cgi/man.cgi?query=autofs&sektion=5[autofs(5)] subsystem has been updated to include a new http://www.FreeBSD.org/cgi/man.cgi?query=auto_master&sektion=5[auto_master(5)] map, `-media`, which allows automatically mounting removable media, such as CD drives or USB flash drives. http://svn.freebsd.org/viewvc/base?view=revision&revision=283223[(r283223)] [.contrib]#(Sponsored by The FreeBSD Foundation)# + +The http://www.FreeBSD.org/cgi/man.cgi?query=autofs&sektion=5[autofs(5)] subsystem has been updated to include a new http://www.FreeBSD.org/cgi/man.cgi?query=auto_master&sektion=5[auto_master(5)] map, `-noauto`, which handles http://www.FreeBSD.org/cgi/man.cgi?query=fstab&sektion=5[fstab(5)] entries set to `noauto`. http://svn.freebsd.org/viewvc/base?view=revision&revision=283242[(r283242)] [.contrib]#(Sponsored by The FreeBSD Foundation)# + +[[storage-net]] +== Networked Storage + +The http://www.FreeBSD.org/cgi/man.cgi?query=ctld&sektion=8[ctld(8)] utility has been updated to include support for registering iSCSI targets and portals on iSNS servers. This provides a mechanism which allows iSCSI initiators to find targets and portals without requiring active discovery. http://svn.freebsd.org/viewvc/base?view=revision&revision=274939[(r274939)] [.contrib]#(Sponsored by iXsystems)# + +The http://www.FreeBSD.org/cgi/man.cgi?query=mount_nfs&sektion=8[mount_nfs(8)] utility has been updated to include support for the `timeo`, `actimeo`, `noac`, and `proto` options. http://svn.freebsd.org/viewvc/base?view=revision&revision=275249[(r275249)] [.contrib]#(Sponsored by The FreeBSD Foundation)# + +[[storage-zfs]] +== ZFS + +A new tunable, `vfs.zfs.spa_slop_shift`, has been added, which controls how much space is reserved by default. http://svn.freebsd.org/viewvc/base?view=revision&revision=275490[(r275490)] + +The `arc_meta_limit` statistics are now visible through the `kstat` http://www.FreeBSD.org/cgi/man.cgi?query=sysctl&sektion=8[sysctl(8)]. As a result of this change, the `vfs.zfs.arc_meta_used` http://www.FreeBSD.org/cgi/man.cgi?query=sysctl&sektion=8[sysctl(8)] has been removed, and replaced with the `kstat.zfs.misc.arcstats.arc_meta_used` http://www.FreeBSD.org/cgi/man.cgi?query=sysctl&sektion=8[sysctl(8)]. http://svn.freebsd.org/viewvc/base?view=revision&revision=277583[(r277583)] + +[[storage-geom]] +== GEOM + +The http://www.FreeBSD.org/cgi/man.cgi?query=ctl&sektion=4[ctl(4)] subsystem has been updated, increasing the ports limit from `128` to `256`, and LUN limit from `256` to `1024`. http://svn.freebsd.org/viewvc/base?view=revision&revision=275891[(r275891)] [.contrib]#(Sponsored by iXsystems)# + +The http://www.FreeBSD.org/cgi/man.cgi?query=gpart&sektion=8[gpart(8)] utility has been updated to include support for the `apple-boot`, `apple-hfs`, and `apple-ufs` MBR partitioning schemes. http://svn.freebsd.org/viewvc/base?view=revision&revision=282861[(r282861)] + +[[boot]] +== Boot Loader Changes + +This section covers the boot loader, boot menu, and other boot-related changes. + +[[boot-loader]] +== Boot Loader Changes + +Support for `bzipfs` has been added to the EFI loader. http://svn.freebsd.org/viewvc/base?view=revision&revision=281323[(r281323)] + +The boot loader has been updated to support entering the GELI passphrase before loading the kernel. To enable this behavior, add `geom_eli_passphrase_prompt="YES"` to http://www.FreeBSD.org/cgi/man.cgi?query=loader.conf&sektion=5[loader.conf(5)]. http://svn.freebsd.org/viewvc/base?view=revision&revision=281843[(r281843)] + +The memory test run at boot time on FreeBSD/amd64 platforms has been disabled by default. http://svn.freebsd.org/viewvc/base?view=revision&revision=283262[(r283262)] [.contrib]#(Sponsored by The FreeBSD Foundation)# + +A new http://www.FreeBSD.org/cgi/man.cgi?query=ttys&sektion=5[ttys(5)] class, `3wire`, has been added. This is similar to the existing terminal classes, but does not have a defined baudrate. http://svn.freebsd.org/viewvc/base?view=revision&revision=283972[(r283972)] + +[arm] The http://www.FreeBSD.org/cgi/man.cgi?query=ttys&sektion=5[ttys(5)] file for FreeBSD/arm has been updated to enable [.filename]`ttyu1`, [.filename]`ttyu2`, and [.filename]`ttyu3` by default, if the callin port is an active console port. http://svn.freebsd.org/viewvc/base?view=revision&revision=284775[(r284775)] [.contrib]#(Sponsored by The FreeBSD Foundation)# + +[[network]] +== Networking + +This section describes changes that affect networking in FreeBSD. + +[[network-protocols]] +== Network Protocols + +Support for PLPMTUD blackhole detection (RFC 4821) has been added to the http://www.FreeBSD.org/cgi/man.cgi?query=tcp&sektion=4[tcp(4)] stack, disabled by default. New control tunables have been added: http://svn.freebsd.org/viewvc/base?view=revision&revision=273838[(r273838)] [.contrib]#(Sponsored by Limelight Networks)# + +[cols=",",options="header",] +|=== +|Tunable |Description +|`net.inet.tcp.pmtud_blackhole_detection` |Enables or disables PLPMTUD blackhole detection +|`net.inet.tcp.pmtud_blackhole_mss` |MSS to try for IPv4 +|`net.inet.tcp.v6pmtud_blackhole_mss` |MSS to try for IPv6 +|=== + +New monitoring http://www.FreeBSD.org/cgi/man.cgi?query=sysctl&sektion=8[sysctl(8)]s haven been added: + +[cols=",",options="header",] +|=== +|Tunable |Description +|`net.inet.tcp.pmtud_blackhole_activated` |Number of times the code was activated to attempt downshifting the MSS +|`net.inet.tcp.pmtud_blackhole_min_activated` |Number of times the blackhole MSS was used in an attempt to downshift +|`net.inet.tcp.pmtud_blackhole_failed` |Number of times that the blackhole failed to connect after downshifting the MSS +|=== + +[[ports]] +== Ports Collection and Package Infrastructure + +This section covers changes to the FreeBSD Ports Collection, package infrastructure, and package maintenance and installation tools. + +[[ports-versions]] +== Ports and Package Versions + +The [.filename]`ports-mgmt/pkg` package has been updated to version 1.5.4 in the `quarterly` branch, and version 1.5.5 in the `head` branch. + +The [.filename]`x11-servers/xorg-server` package for FreeBSD 10.2-RELEASE has been updated to version 1.14.7_5. + +The [.filename]`x11/xorg` package for FreeBSD 10.2-RELEASE has been updated to version 7.7_2. + +The [.filename]`x11/gnome3` package for FreeBSD 10.2-RELEASE has been updated to version 3.14.2. + +The [.filename]`x11/kde4` package for FreeBSD 10.2-RELEASE has been updated to version 4.14.3. + +[[releng]] +== Release Engineering and Integration + +This section convers changes that are specific to the FreeBSD Release Engineering processes. + +[[releng-changes]] +== Integration Changes + +The Release Engineering build tools have been updated to support building FreeBSD/arm images without external utilities for supported boards where a corresponding `u-boot` port exists in the Ports Collection. http://svn.freebsd.org/viewvc/base?view=revision&revision=283161[(r283161)] [.contrib]#(Sponsored by The FreeBSD Foundation)# + +The FreeBSD/i386 memory stick installation images are now created using the http://www.FreeBSD.org/cgi/man.cgi?query=mkimg&sektion=1[mkimg(1)] utility, matching the way the FreeBSD/amd64 images are created. http://svn.freebsd.org/viewvc/base?view=revision&revision=283548[(r283548)] [.contrib]#(Sponsored by The FreeBSD Foundation)# + +The default http://www.FreeBSD.org/cgi/man.cgi?query=pkg&sektion=8[pkg(8)] repository set in [.filename]`/etc/pkg/FreeBSD.conf` now defaults to the `quarterly` package set. To use the `latest` branch (as was the previous default), the comment at the top of [.filename]`/etc/pkg/FreeBSD.conf` explains how to disable the default repository and specify an alternative repository. http://svn.freebsd.org/viewvc/base?view=revision&revision=285830[(r285830)] [.contrib]#(Sponsored by The FreeBSD Foundation)# |