path: root/en_US.ISO8859-1/htdocs/releases/12.2R/relnotes/relnotes.xml

<?xml version="1.0" encoding="iso-8859-1"?>
<!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
"../../../../../share/xml/freebsd50.dtd" [
<!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN" "../share/xml/release.ent">
 %release;
<!ENTITY % sponsor PUBLIC "-//FreeBSD//ENTITIES Sponsor Specification//EN" "../share/xml/sponsor.ent">
 %sponsor;
<!ENTITY % vendor PUBLIC "-//FreeBSD//ENTITIES Vendor Specification//EN" "../share/xml/vendor.ent">
 %vendor;
<!ENTITY security SYSTEM "../share/xml/security.xml">
<!ENTITY errata SYSTEM "../share/xml/errata.xml">
]>
<article xmlns="http://docbook.org/ns/docbook"
  xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0">

  <info>
    <title>&os; &release.current; Release Notes</title>

    <author>
      <orgname>The &os; Project</orgname>
    </author>

    <pubdate>$FreeBSD$</pubdate>
    <copyright>
      <year>2020</year>
      <holder role="mailto:doc@FreeBSD.org">The &os; Documentation
	Project</holder>
    </copyright>

    <legalnotice xml:id="trademarks" role="trademarks">
      &tm-attrib.freebsd;
      &tm-attrib.ibm;
      &tm-attrib.ieee;
      &tm-attrib.intel;
      &tm-attrib.sparc;
      &tm-attrib.general;
    </legalnotice>

    <abstract>
      <para>The release notes for &os; &release.current; contain
	a summary of the changes made to the &os; base system on the
	&release.branch; development line.  This document lists
	applicable security advisories that were issued since the last
	release, as well as significant changes to the &os; kernel and
	userland.  Some brief remarks on upgrading are also
	presented.</para>
    </abstract>
  </info>

  <sect1 xml:id="intro">
    <title>Introduction</title>

    <para>This document contains the release notes for &os;
      &release.current;.  It describes recently added, changed, or
      deleted features of &os;.  It also provides some notes on
      upgrading from previous versions of &os;.</para>

    <para releasetype="current">The &release.type; distribution to
      which these release notes apply represents the latest point
      along the &release.branch; development branch since
      &release.branch; was created.  Information regarding pre-built,
      binary &release.type; distributions along this branch can be
      found at <uri
	xlink:href="&release.url;">&release.url;</uri>.</para>

    <para releasetype="snapshot">The &release.type; distribution to
      which these release notes apply represents a point along the
      &release.branch; development branch between &release.prev; and
      the future &release.next;.  Information regarding pre-built,
      binary &release.type; distributions along this branch can be
      found at <uri
	xlink:href="&release.url;">&release.url;</uri>.</para>

    <para releasetype="release">This distribution of &os;
      &release.current; is a &release.type; distribution.  It can be
      found at <uri xlink:href="&release.url;">&release.url;</uri> or
      any of its mirrors.  More information on obtaining this (or
      other) &release.type; distributions of &os; can be found in the
      <link
	xlink:href="&url.books.handbook;/mirrors.html"><quote>Obtaining
	  &os;</quote> appendix</link> to the <link
	xlink:href="&url.books.handbook;/">&os;
	Handbook</link>.</para>

    <para>All users are encouraged to consult the release errata
      before installing &os;.  The errata document is updated with
      <quote>late-breaking</quote> information discovered late in the
      release cycle or after the release.  Typically, it contains
      information on known bugs, security advisories, and corrections
      to documentation.  An up-to-date copy of the errata for &os;
      &release.current; can be found on the &os; Web site.</para>

    <para>This document describes the most user-visible new or changed
      features in &os; since &release.prev;.  In general, changes
      described here are unique to the &release.branch; branch unless
      specifically marked as &merged; features.</para>

    <para>Typical release note items document recent security
      advisories issued after &release.prev;, new drivers or hardware
      support, new commands or options, major bug fixes, or
      contributed software upgrades.  They may also list changes to
      major ports/packages or release engineering practices.  Clearly
      the release notes cannot list every single change made to &os;
      between releases; this document focuses primarily on security
      advisories, user-visible changes, and major architectural
      improvements.</para>
  </sect1>

  <sect1 xml:id="upgrade">
    <title>Upgrading from Previous Releases of &os;</title>

    <para arch="amd64,i386">Binary upgrades between RELEASE versions
      (and snapshots of the various security branches) are supported
      using the &man.freebsd-update.8; utility.  The binary upgrade
      procedure will update unmodified userland utilities, as well as
      unmodified GENERIC kernels distributed as a part of an official
      &os; release.  The &man.freebsd-update.8; utility requires that
      the host being upgraded have Internet connectivity.</para>

    <para>Source-based upgrades (those based on recompiling the &os;
      base system from source code) from previous versions are
      supported, according to the instructions in
      <filename>/usr/src/UPDATING</filename>.</para>

    <important>
      <para>Upgrading &os; should only be attempted after backing up
	<emphasis>all</emphasis> data and configuration files.</para>
    </important>
  </sect1>

  <sect1 xml:id="security-errata">
    <title>Security and Errata</title>

    <para>This section lists the various Security Advisories and
      Errata Notices since &release.prev;.</para>

    <sect2 xml:id="security">
      <title>Security Advisories</title>

      <informaltable frame="none" pgwide="1">
	<tgroup cols="3">
	  <colspec colwidth="40%"/>
	  <colspec colwidth="30%"/>
	  <colspec colwidth="30%"/>
	  <thead>
	    <row>
	      <entry>Advisory</entry>
	      <entry>Date</entry>
	      <entry>Topic</entry>
	    </row>
	  </thead>

	  <tbody>
	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-SA-18:15.bootpd.asc">FreeBSD-SA-18:15.bootpd</link></entry>
	      <entry>19&nbsp;December&nbsp;2018</entry>
	      <entry><para>Buffer overflow</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-SA-19:01.syscall.asc">FreeBSD-SA-19:01.syscall</link></entry>
	      <entry>5&nbsp;February&nbsp;2019</entry>
	      <entry><para>Kernel data register leak</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-SA-19:02.fd.asc">FreeBSD-SA-19:02.fd</link></entry>
	      <entry>5&nbsp;February&nbsp;2019</entry>
	      <entry><para>File description reference count
		leak</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-SA-19:03.wpa.asc">FreeBSD-SA-19:03.wpa</link></entry>
	      <entry>14&nbsp;May&nbsp;2019</entry>
	      <entry><para>Multiple vulnerabilities</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-SA-19:04.ntp.asc">FreeBSD-SA-19:04.ntp</link></entry>
	      <entry>14&nbsp;May&nbsp;2019</entry>
	      <entry><para>Authenticated denial of service in
		&man.ntpd.8;</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-SA-19:05.pf.asc">FreeBSD-SA-19:05.pf</link></entry>
	      <entry>14&nbsp;May&nbsp;2019</entry>
	      <entry><para>IPv6 fragment reassembly panic in
		&man.pf.4;</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-SA-19:06.pf.asc">FreeBSD-SA-19:06.pf</link></entry>
	      <entry>14&nbsp;May&nbsp;2019</entry>
	      <entry><para>ICMP/ICMP6 packet filter bypass in
		&man.pf.4;</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-SA-19:07.mds.asc">FreeBSD-SA-19:07.mds</link></entry>
	      <entry>14&nbsp;May&nbsp;2019</entry>
	      <entry><para>Microarchitectural Data
		Sampling</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-SA-19:08.rack.asc">FreeBSD-SA-19:08.rack</link></entry>
	      <entry>19&nbsp;June&nbsp;2019</entry>
	      <entry><para>Resource exhaustion in non-default RACK TCP
		stack</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-SA-19:09.iconv.asc">FreeBSD-SA-19:09.iconv</link></entry>
	      <entry>2&nbsp;July&nbsp;2019</entry>
	      <entry><para>&man.iconv.3; buffer
		overflow</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-SA-19:10.ufs.asc">FreeBSD-SA-19:10.ufs</link></entry>
	      <entry>2&nbsp;July&nbsp;2019</entry>
	      <entry><para>Kernel stack disclosure</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-SA-19:11.cd_ioctl.asc">FreeBSD-SA-19:11.cd_ioctl</link></entry>
	      <entry>2&nbsp;July&nbsp;2019</entry>
	      <entry><para>Privilege escalation in
		&man.cd.4;</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-SA-19:12.telnet.asc">FreeBSD-SA-19:12.telnet</link></entry>
	      <entry>24&nbsp;July&nbsp;2019</entry>
	      <entry><para>Multiple vulnerabilities</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-SA-19:13.pts.asc">FreeBSD-SA-19:13.pts</link></entry>
	      <entry>24&nbsp;July&nbsp;2019</entry>
	      <entry><para>Write-after-free
		vulnerability</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-SA-19:15.mqueuefs.asc">FreeBSD-SA-19:15.mqueuefs</link></entry>
	      <entry>24&nbsp;July&nbsp;2019</entry>
	      <entry><para>Reference count overflow</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-SA-19:16.bhyve.asc">FreeBSD-SA-19:16.bhyve</link></entry>
	      <entry>24&nbsp;July&nbsp;2019</entry>
	      <entry><para>&man.xhci.4; out-of-bounds
		read</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-SA-19:17.fd.asc">FreeBSD-SA-19:17.fd</link></entry>
	      <entry>24&nbsp;July&nbsp;2019</entry>
	      <entry><para>Reference count leak</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-SA-19:18.bzip2.asc">FreeBSD-SA-19:18.bzip2</link></entry>
	      <entry>6&nbsp;August&nbsp;2019</entry>
	      <entry><para>Multiple vulnerabilities</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-SA-19:19.mldv2.asc">FreeBSD-SA-19:19.mldv2</link></entry>
	      <entry>6&nbsp;August&nbsp;2019</entry>
	      <entry><para>Out-of-bounds memory access</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-SA-19:20.bsnmp.asc">FreeBSD-SA-19:20.bsnmp</link></entry>
	      <entry>6&nbsp;August&nbsp;2019</entry>
	      <entry><para>Insufficient message length
		validation</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-SA-19:21.bhyve.asc">FreeBSD-SA-19:21.bhyve</link></entry>
	      <entry>6&nbsp;August&nbsp;2019</entry>
	      <entry><para>Insufficient validation of guest-supplied
		data</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-SA-19:22.mbuf.asc">FreeBSD-SA-19:22.mbuf</link></entry>
	      <entry>20&nbsp;August&nbsp;2019</entry>
	      <entry><para>IPv6 remove
		denial-of-service</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-SA-19:23.midi.asc">FreeBSD-SA-19:23.midi</link></entry>
	      <entry>20&nbsp;August&nbsp;2019</entry>
	      <entry><para>Kernel memory disclosure</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-SA-19:24.mqueuefs.asc">FreeBSD-SA-19:24.mqueuefs</link></entry>
	      <entry>20&nbsp;August&nbsp;2019</entry>
	      <entry><para>Reference count overflow</para></entry>
	    </row>
	  </tbody>
	</tgroup>
      </informaltable>
    </sect2>

    <sect2 xml:id="errata">
      <title>Errata Notices</title>

      <informaltable frame="none" pgwide="1">
	<tgroup cols="3">
	  <colspec colwidth="40%"/>
	  <colspec colwidth="30%"/>
	  <colspec colwidth="30%"/>
	  <thead>
	    <row>
	      <entry>Errata</entry>
	      <entry>Date</entry>
	      <entry>Topic</entry>
	    </row>
	  </thead>

	  <tbody>
	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-EN-19:01.cc_cubic.asc">FreeBSD-EN-19:01.cc_cubic</link></entry>
	      <entry>9&nbsp;January&nbsp;2019</entry>
	      <entry><para>Connection stalls with CUBIC congestion
		control</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-EN-19:02.tcp.asc">FreeBSD-EN-19:02.tcp</link></entry>
	      <entry>9&nbsp;January&nbsp;2019</entry>
	      <entry><para>TCP connections may stall and eventually
		fail in case of packet loss</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-EN-19:03.sqlite.asc">FreeBSD-EN-19:03.sqlite</link></entry>
	      <entry>9&nbsp;January&nbsp;2019</entry>
	      <entry><para>sqlite update</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-EN-19:04.tzdata.asc">FreeBSD-EN-19:04.tzdata</link></entry>
	      <entry>9&nbsp;January&nbsp;2019</entry>
	      <entry><para>Timezone database information
		update</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-EN-19:06.dtrace.asc">FreeBSD-EN-19:06.dtrace</link></entry>
	      <entry>5&nbsp;February&nbsp;2019</entry>
	      <entry><para>DTrace incompatibility with SMAP-enabled
		systems</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-EN-19:07.lle.asc">FreeBSD-EN-19:07.lle</link></entry>
	      <entry>5&nbsp;February&nbsp;2019</entry>
	      <entry><para>LLE table lookup code race
		condition</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-EN-19:08.tzdata.asc">FreeBSD-EN-19:08.tzdata</link></entry>
	      <entry>14&nbsp;May&nbsp;2019</entry>
	      <entry><para>Timezone database information
		update</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-EN-19:09.xinstall.asc">FreeBSD-EN-19:09.xinstall</link></entry>
	      <entry>14&nbsp;May&nbsp;2019</entry>
	      <entry><para>&man.install.1; broken with partially
		matching relative paths</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-EN-19:10.scp.asc">FreeBSD-EN-19:10.scp</link></entry>
	      <entry>14&nbsp;May&nbsp;2019</entry>
	      <entry><para>Insufficient filename validation in
		&man.scp.1; client</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-EN-19:11.net.asc">FreeBSD-EN-19:11.net</link></entry>
	      <entry>19&nbsp;June&nbsp;2019</entry>
	      <entry><para>Incorrect locking in networking
		stack</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-EN-19:12.tzdata.asc">FreeBSD-EN-19:12.tzdata</link></entry>
	      <entry>2&nbsp;July&nbsp;2019</entry>
	      <entry><para>Timezone database information
		update</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-EN-19:13.mds.asc">FreeBSD-EN-19:13.mds</link></entry>
	      <entry>24&nbsp;July&nbsp;2019</entry>
	      <entry><para>System crash from Intel CPU vulnerability
		mitigation</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-EN-19:14.epoch.asc">FreeBSD-EN-19:14.epoch</link></entry>
	      <entry>6&nbsp;August&nbsp;2019</entry>
	      <entry><para>Incorrect locking</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-EN-19:15.libunwind.asc">FreeBSD-EN-19:15.libunwind</link></entry>
	      <entry>6&nbsp;August&nbsp;2019</entry>
	      <entry><para>Incorrect exception handling</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-EN-19:16.bhyve.asc">FreeBSD-EN-19:16.bhyve</link></entry>
	      <entry>20&nbsp;August&nbsp;2019</entry>
	      <entry><para>Instruction emulation
		improvements</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="&security.url;/FreeBSD-EN-19:17.ipfw.asc">FreeBSD-EN-19:17.ipfw</link></entry>
	      <entry>20&nbsp;August&nbsp;2019</entry>
	      <entry><para>&quot;jail&quot; keyword fix</para></entry>
	    </row>
	  </tbody>
	</tgroup>
      </informaltable>
    </sect2>
  </sect1>

  <sect1 xml:id="userland">
    <title>Userland</title>

    <para>This section covers changes and additions to userland
      applications, contributed software, and system utilities.</para>

    <sect2 xml:id="userland-config">
      <title>Userland Configuration Changes</title>

      <para revision="352094">The <application>gcc</application>
	<literal>-Werror</literal> flag has been turned off by
	default.</para>
    </sect2>

    <sect2 xml:id="userland-programs">
      <title>Userland Application Changes</title>

      <para revision="345569">The &man.lockf.1; utility has been
	updated to return <literal>EX_UNAVAILABLE</literal> if the
	<literal>-n</literal> flag is used and the lock file does not
	exist.</para>

      <para revision="342705">The &man.ktrdump.8; utility has been
	updated to include the <literal>-l</literal> flag which
	enables &quot;live&quot; mode when specified.</para>

      <para revision="343250">The &man.gzip.1; utility has been
	updated to add <literal>-l</literal> support for &man.xz.1;
	files.</para>

      <para revision="344688">The &man.trim.8; utility has been added,
	which deletes content for blocks on flash-based storage
	devices that use wear-leveling algorithms.</para>

      <para revision="345487">The &man.sh.1; utility has been updated
	to include a new <literal>pipefail</literal> option, which
	when set, changes the exit status of a pipeline to the last
	non-zero exit status of any command in the pipeline.</para>

      <para revision="347752" contrib="sponsor"
	sponsor="&mellanox;">The &man.mlx5tool.8; utility has been
	updated to implement firmware update capability for
	ConnectX-4&reg;, ConnectX-5&reg;, and ConnectX-6&reg;.</para>

      <para revision="348426">The &man.posixshmcontrol.1; utility has
	been added.</para>

      <para revision="349930">The &man.swapon.8; utility has been
	updated to invoke <function>BIO_DELETE</function> to trim
	swap devices if either the <literal>-E</literal> flag is used
	on the command line, or if the <literal>trimonce</literal>
	option is included in &man.fstab.5;.</para>

      <para revision="350952">The &man.nvmecontrol.8; utility has been
	updated to add a new subcommand, <literal>resv</literal>,
	which is used to handle <acronym>NVMe</acronym>
	reservations.</para>

      <para revision="351530" contrib="sponsor" sponsor="&ix;">The
	&man.camcontrol.8; utility has been updated to support block
	descriptors when using the <literal>modepage</literal>
	subcommand.</para>

      <para revision="352774">The &man.freebsd-update.8; utility has
	been updated to include two new commands,
	<literal>updatesready</literal> and
	<literal>showconfig</literal>.</para>

      <para revision="352901">The &man.zfs.8; utility has been updated
	to support the <literal>-v</literal>, <literal>-n</literal>,
	and <literal>-P</literal> flags together with the
	<literal>send</literal> subcommand for bookmarks.</para>
    </sect2>

    <sect2 xml:id="userland-contrib">
      <title>Contributed Software</title>

      <para revision="343281"><application>BearSSL</application> has
	been imported to the base system.</para>

      <para revision="344884">The &man.ntpd.8; suite of utilities have
	been updated to version 4.2.8p13.</para>

      <para revision="346986">The &man.tcpdump.1; utility has been
	updated to disable &man.capsicum.4; support when the
	<literal>-E</literal> flag is used.</para>

      <para revision="346987">The &man.bsnmpd.1; utility has been
	updated to include <acronym>IPv6</acronym> transport
	support.</para>

      <para revision="349523">The &man.libarchive.3; library has
	been updated to version 3.4.0.</para>

      <para revision="350256">The <application>clang</application>,
	<application>llvm</application>,
	<application>lld</application>,
	<application>lldb</application>,
	<application>compiler-rt</application> utilities and
	<application>libc++</application> have been updated to version
	8.0.1.</para>

      <para revision="350297" contrib="sponsor" sponsor="&ff;">The
	<application>lld</application> linker has been enabled by
	default for &arch.i386;.</para>

      <para revision="350634">The
	<application>bzip2recover</application> utility has been
	added.</para>

      <para revision="351007">The &man.bzip2.1; utility has been
	updated to version 1.0.8.</para>

      <para revision="351243">Warnings have been added for
	<application>Kerberos</application> <acronym>GSS</acronym>
	algorithms deprecated in <acronym>RFC</acronym>8221 and
	<acronym>RFC</acronym>8429.</para>

      <para revision="351390">The &man.mandoc.1; utility has been
	updated to the 2019-07-23 snapshot.</para>

      <para revision="351611">The <acronym>WPA</acronym> utilities
	have been updated to version 2.9.</para>

      <para revision="352192"><application>OpenSSL</application> has
	been updated to version 1.1.1d.</para>

      <para revision="352353">The timezone database files have been
	updated to version 2019c.</para>
    </sect2>

    <sect2 xml:id="userland-deprecated-programs">
      <title>Deprecated Applications</title>

      <para revision="340444">The &man.ctm.1; utility has been marked
	as deprecated, and has been removed in &os;&nbsp;13.0.</para>

      <para revision="343940">The &man.timed.8; utility has been
	marked as deprecated, and has been removed in
	&os;&nbsp;13.0.</para>
    </sect2>

    <sect2 xml:id="userland-libraries">
      <title>Runtime Libraries and API</title>

      <para revision="346331">The <literal>libomp</literal> library
	has been added.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="kernel">
    <title>Kernel</title>

    <para>This section covers changes to kernel configurations, system
      tuning, and system control parameters that are not otherwise
      categorized.</para>

    <sect2 xml:id="kernel-general">
      <title>General Kernel Changes</title>

      <para revision="343083" contrib="sponsor"
	sponsor="&modirum;">The kernel will now log the &man.jail.8;
	<acronym>ID</acronym> when logging a process exit.  The
	&man.jail.8; <acronym>ID</acronym> <literal>0</literal>
	represents processes that are not jailed.</para>

      <para revision="343735">The <filename>pci_vendors</filename>
	list has been updated to version 2019.01.29.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="drivers">
    <title>Devices and Drivers</title>

    <para>This section covers changes and additions to devices and
      device drivers since &release.prev;.</para>

    <sect2 xml:id="drivers-device">
      <title>Device Drivers</title>

      <para revision="340190" contrib="sponsor"
	sponsor="&panzura;">The &man.ichwd.4; driver has been updated
	to include support for <acronym>TCO</acronym> watchdog timers
	in the Lewisburg <acronym>PCH</acronym> (C620) chipset.</para>

      <para revision="340446">The &man.amdsmn.4; and &man.amdtemp.4;
	drivers have been updated to support Ryzen&trade; 2 host
	bridges.</para>

      <para revision="340447">The &man.amdtemp.4; driver has been
	updated to correct temperature reporting for the AMD&reg;
	2990WX.</para>

      <para revision="342835">The &man.rtwn.pci.4; driver has been
	added for the RTL8188EE chipset.</para>

      <para revision="351246">The &man.crypto.4; driver has been
	updated to print warnings for deprecated algorithms.</para>

      <para revision="351536">The &man.ntb.hw.amd.4; driver has been
	added, providing support for the AMD&reg; Non-Transparent
	Bridge.</para>

      <para revision="351914">The &man.nvme.4; driver has been updated
	to support suspend/resume for <acronym>PCI</acronym>
	attachment.</para>

      <para revision="351942" contrib="sponsor" sponsor="&hp;">The
	&man.cdceem.4; driver has been added, supporting virtual
	<acronym>USB</acronym> network cards provided by
	<acronym>iLO</acronym>&nbsp;5, found in new
	HPE&reg;&nbsp;Proliant&trade; servers.</para>

      <para revision="352351" contrib="sponsor" sponsor="&ff;">The
	&man.fusefs.5; driver has been overhauled, implementing new
	features and performance improvements.</para>

      <para revision="352761">The &man.mpr.4; and &man.mps.4; drivers
	have been updated with stability fixes.</para>

      <para revision="352761">As result of converting &man.mps.4; to
	use <function>atomic_swap_64</function>, it is now disabled on
	32-bit &arch.powerpc; and &arch.mips;.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="storage">
    <title>Storage</title>

    <para>This section covers changes and additions to file systems
      and other storage subsystems, both local and networked.</para>

    <sect2 xml:id="storage-general">
      <title>General Storage</title>

      <para revision="347384" contrib="sponsor"
	sponsor="&multiplay;">The &man.camcontrol.8; utility has been
	updated to add <acronym>ATA</acronym> power mode
	support.</para>

      <para revision="348587">Deprecation warnings have been added for
	weaker algorithms when creating &man.geli.8; providers.</para>

      <para revision="r349832">The &man.cam.4; subsystem has been
	updated to improve <acronym>AHCI</acronym> enclosure
	management and <acronym>SES</acronym> interoperation.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="boot">
    <title>Boot Loader Changes</title>

    <para>This section covers the boot loader, boot menu, and other
      boot-related changes.</para>

    <sect2 xml:id="boot-loader">
      <title>Boot Loader Changes</title>

      <para revision="342683">The &man.loader.8; has been update to
	allow booting from <acronym>ZFS</acronym> datasets with the
	<literal>large_dnode</literal> feature flag enabled.</para>

      <para revision="351384">The &man.loader.8; has been updated to
	support the <literal>com.delphix:removing</literal>
	<acronym>ZFS</acronym> &man.zpool-features.7; flag.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="network">
    <title>Networking</title>

    <para>This section describes changes that affect networking in
      &os;.</para>

    <sect2 xml:id="network-general">
      <title>General Network</title>

      <para revision="344667">The &man.ipfw.8; utility has been
	updated to fix showing headers outside of &quot;all&quot;
	when executing <literal>ipfw table list</literal>.</para>

      <para revision="346200" contrib="sponsor"
	sponsor="&yandex;">Support for <acronym>NAT64</acronym>
	<acronym>CLAT</acronym> has been added, as defined in
	<acronym>RFC</acronym>6877.</para>

      <para revision="347110" contrib="sponsor"
	sponsor="&netflix;">The
	<literal>net.inet.tcp.rexmit_initial</literal> &man.sysctl.8;
	has been added, used for setting
	<literal>RTO.Initial</literal>, used by
	<acronym>TCP</acronym>.</para>

      <para revision="348233">Support for
	<acronym>GRE</acronym>-in-<acronym>UDP</acronym> encapsulation
	has been added, as defined in
	<acronym>RFC</acronym>8086.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="ports">
    <title>Ports Collection and Package Infrastructure</title>

    <para>This section covers changes to the &os;&nbsp;Ports
      Collection, package infrastructure, and package maintenance and
      installation tools.</para>

    <sect2 xml:id="ports-packages ">
      <title>Packaging Changes</title>

      <para>The &man.pkg.8; utility has been updated to version
	1.12.0.</para>

      <para>The <application>GNOME</application> desktop environment
	has been updated to version 3.28.</para>

      <para>The <application>KDE</application> desktop environment
	has been updated to version 5.16.5.19.08.1.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="future-releases">
    <title>General Notes Regarding Future &os; Releases</title>

    <sect2 xml:id="future-releases-cputype">
      <title>Default <varname>CPUTYPE</varname> Change</title>

      <para>Starting with &os;-13.0, the default
	<varname>CPUTYPE</varname> for the &arch.i386;
	architecture will change from <literal>486</literal> to
	<literal>686</literal>.</para>

      <para>This means that, by default, binaries produced will
	require a 686-class <acronym>CPU</acronym>, including but
	not limited to binaries provided by the &os;&nbsp;Release
	Engineering team.  &os;&nbsp;13.0 will continue to support
	older <acronym>CPU</acronym>s, however users needing this
	functionality will need to build their own releases for
	official support.</para>

      <para>As the primary use for i486 and i586
	<acronym>CPU</acronym>s is generally in the embedded market,
	the general end-user impact is expected to be minimal, as new
	hardware with these <acronym>CPU</acronym> types has long
	faded, and much of the deployed base of such systems is
	nearing retirement age, statistically.</para>

      <para>There were several factors taken into account for this
	change.  For example, i486 does not have 64-bit atomics, and
	while they can be emulated in the kernel, they cannot be
	emulated in the userland.  Additionally, the 32-bit amd64
	libraries have been i686 since their inception.</para>

      <para>As the majority of 32-bit testing is done by developers
	using the lib32 libraries on 64-bit hardware with the
	<varname>COMPAT_FREEBSD32</varname> option in the kernel,
	this change ensures better coverage and user experience.
	This also aligns with what the majority of &linux;
	distributions have been doing for quite some time.</para>

      <para>This is expected to be the final bump of the default
	<varname>CPUTYPE</varname> in &arch.i386;.</para>

      <para>
	<important>
	  <para>This change does not affect the &os;&nbsp;12.x
	    series of releases.</para>
	</important>
      </para>
    </sect2>
  </sect1>
</article>