aboutsummaryrefslogtreecommitdiff
path: root/en_US.ISO8859-1/htdocs/releases/12.2R/relnotes/relnotes.xml
blob: 972c51be904d2a833c24a8b9d186f679b73078da (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
<?xml version="1.0" encoding="iso-8859-1"?>
<!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
"../../../../../share/xml/freebsd50.dtd" [
<!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN" "../share/xml/release.ent">
 %release;
<!ENTITY % sponsor PUBLIC "-//FreeBSD//ENTITIES Sponsor Specification//EN" "../share/xml/sponsor.ent">
 %sponsor;
<!ENTITY % vendor PUBLIC "-//FreeBSD//ENTITIES Vendor Specification//EN" "../share/xml/vendor.ent">
 %vendor;
<!ENTITY security SYSTEM "../share/xml/security.xml">
<!ENTITY errata SYSTEM "../share/xml/errata.xml">
]>
<article xmlns="http://docbook.org/ns/docbook"
  xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0">

  <info>
    <title>&os; &release.current; Release Notes</title>

    <author>
      <orgname>The &os; Project</orgname>
    </author>

    <pubdate>$FreeBSD$</pubdate>
    <copyright>
      <year>2020</year>
      <holder role="mailto:doc@FreeBSD.org">The &os; Documentation
	Project</holder>
    </copyright>

    <legalnotice xml:id="trademarks" role="trademarks">
      &tm-attrib.freebsd;
      &tm-attrib.ibm;
      &tm-attrib.ieee;
      &tm-attrib.intel;
      &tm-attrib.sparc;
      &tm-attrib.general;
    </legalnotice>

    <abstract>
      <para>The release notes for &os; &release.current; contain
	a summary of the changes made to the &os; base system on the
	&release.branch; development line.  This document lists
	applicable security advisories that were issued since the last
	release, as well as significant changes to the &os; kernel and
	userland.  Some brief remarks on upgrading are also
	presented.</para>
    </abstract>
  </info>

  <sect1 xml:id="intro">
    <title>Introduction</title>

    <para>This document contains the release notes for &os;
      &release.current;.  It describes recently added, changed, or
      deleted features of &os;.  It also provides some notes on
      upgrading from previous versions of &os;.</para>

    <para releasetype="current">The &release.type; distribution to
      which these release notes apply represents the latest point
      along the &release.branch; development branch since
      &release.branch; was created.  Information regarding pre-built,
      binary &release.type; distributions along this branch can be
      found at <uri
	xlink:href="&release.url;">&release.url;</uri>.</para>

    <para releasetype="snapshot">The &release.type; distribution to
      which these release notes apply represents a point along the
      &release.branch; development branch between &release.prev; and
      the future &release.next;.  Information regarding pre-built,
      binary &release.type; distributions along this branch can be
      found at <uri
	xlink:href="&release.url;">&release.url;</uri>.</para>

    <para releasetype="release">This distribution of &os;
      &release.current; is a &release.type; distribution.  It can be
      found at <uri xlink:href="&release.url;">&release.url;</uri> or
      any of its mirrors.  More information on obtaining this (or
      other) &release.type; distributions of &os; can be found in the
      <link
	xlink:href="&url.books.handbook;/mirrors.html"><quote>Obtaining
	  &os;</quote> appendix</link> to the <link
	xlink:href="&url.books.handbook;/">&os;
	Handbook</link>.</para>

    <para>All users are encouraged to consult the release errata
      before installing &os;.  The errata document is updated with
      <quote>late-breaking</quote> information discovered late in the
      release cycle or after the release.  Typically, it contains
      information on known bugs, security advisories, and corrections
      to documentation.  An up-to-date copy of the errata for &os;
      &release.current; can be found on the &os; Web site.</para>

    <para>This document describes the most user-visible new or changed
      features in &os; since &release.prev;.  In general, changes
      described here are unique to the &release.branch; branch unless
      specifically marked as &merged; features.</para>

    <para>Typical release note items document recent security
      advisories issued after &release.prev;, new drivers or hardware
      support, new commands or options, major bug fixes, or
      contributed software upgrades.  They may also list changes to
      major ports/packages or release engineering practices.  Clearly
      the release notes cannot list every single change made to &os;
      between releases; this document focuses primarily on security
      advisories, user-visible changes, and major architectural
      improvements.</para>
  </sect1>

  <sect1 xml:id="upgrade">
    <title>Upgrading from Previous Releases of &os;</title>

    <para arch="amd64,i386">Binary upgrades between RELEASE versions
      (and snapshots of the various security branches) are supported
      using the &man.freebsd-update.8; utility.  The binary upgrade
      procedure will update unmodified userland utilities, as well as
      unmodified GENERIC kernels distributed as a part of an official
      &os; release.  The &man.freebsd-update.8; utility requires that
      the host being upgraded have Internet connectivity.</para>

    <para>Source-based upgrades (those based on recompiling the &os;
      base system from source code) from previous versions are
      supported, according to the instructions in
      <filename>/usr/src/UPDATING</filename>.</para>

    <important>
      <para>Upgrading &os; should only be attempted after backing up
	<emphasis>all</emphasis> data and configuration files.</para>
    </important>
  </sect1>

  <sect1 xml:id="security-errata">
    <title>Security and Errata</title>

    <para>This section lists the various Security Advisories and
      Errata Notices since &release.prev;.</para>

    <sect2 xml:id="security">
      <title>Security Advisories</title>

      <informaltable frame="none" pgwide="1">
	<tgroup cols="3">
	  <colspec colwidth="40%"/>
	  <colspec colwidth="30%"/>
	  <colspec colwidth="30%"/>
	  <thead>
	    <row>
	      <entry>Advisory</entry>
	      <entry>Date</entry>
	      <entry>Topic</entry>
	    </row>
	  </thead>

	  <tbody>
	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-19:25.mcepsc.asc">FreeBSD-SA-19:25.mcepce</link></entry>
	      <entry>12&nbsp;November&nbsp;2019</entry>
	      <entry><para>Machine Check Exception on Page Size
		Change</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-19:26.mcu.asc">FreeBSD-SA-19:26.mcu</link></entry>
	      <entry>12&nbsp;November&nbsp;2019</entry>
	      <entry><para>Intel CPU Microcode Update</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:01.libfetch.asc">FreeBSD-SA-20:01.libfetch</link></entry>
	      <entry>28&nbsp;January&nbsp;2020</entry>
	      <entry><para>&man.fetch.3; buffer overflow</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:03.thrmisc.asc">FreeBSD-SA-20:03.thrmisc</link></entry>
	      <entry>28&nbsp;January&nbsp;2020</entry>
	      <entry><para>Kernel stack data disclosure</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:04.tcp.asc">FreeBSD-SA-20:04.tcp</link></entry>
	      <entry>18&nbsp;March&nbsp;2020</entry>
	      <entry><para>TCP IPv6 SYN cache kernel information
		disclosure</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:05.if_oce_ioctl.asc">FreeBSD-SA-20:05.if_oce_ioctl</link></entry>
	      <entry>18&nbsp;March&nbsp;2020</entry>
	      <entry><para>Insufficient &man.ioctl.2; privilege
		checking</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:06.if_ixl_ioctl.asc">FreeBSD-SA-20:06.if_ixl_ioctl</link></entry>
	      <entry>18&nbsp;March&nbsp;2020</entry>
	      <entry><para>Insufficient &man.ioctl.2; privilege
		checking</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:07.epair.asc">FreeBSD-SA-20:07.epair</link></entry>
	      <entry>18&nbsp;March&nbsp;2020</entry>
	      <entry><para>Incorrect user-controlled pointer
		use</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:08.jail.asc">FreeBSD-SA-20:08.jail</link></entry>
	      <entry>18&nbsp;March&nbsp;2020</entry>
	      <entry><para>Kernel memory disclosure with nested
		jails</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:09.ntp.asc">FreeBSD-SA-20:09.ntp</link></entry>
	      <entry>18&nbsp;March&nbsp;2020</entry>
	      <entry><para>Multiple denial of service</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:10.ipfw.asc">FreeBSD-SA-20:10.ipfw</link></entry>
	      <entry>21&nbsp;April&nbsp;2020</entry>
	      <entry><para>Invalid &man.mbuf.9; handling</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:11.openssl.asc">FreeBSD-SA-20:11.openssl</link></entry>
	      <entry>21&nbsp;April&nbsp;2020</entry>
	      <entry><para>Remote denial of service</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:12.libalias.asc">FreeBSD-SA-20:12.libalias</link></entry>
	      <entry>12&nbsp;May&nbsp;2020</entry>
	      <entry><para>Insufficient packet length
		validation</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:13.libalias.asc">FreeBSD-SA-20:13.libalias</link></entry>
	      <entry>12&nbsp;May&nbsp;2020</entry>
	      <entry><para>Memory disclosure vulnerability</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:15.cryptodev.asc">FreeBSD-SA-20:15.cryptodev</link></entry>
	      <entry>12&nbsp;May&nbsp;2020</entry>
	      <entry><para>Use-after-free condition</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:16.cryptodev.asc">FreeBSD-SA-20:16.cryptodev</link></entry>
	      <entry>12&nbsp;May&nbsp;2020</entry>
	      <entry><para>Insufficient MAC key length check</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:17.usb.asc">FreeBSD-SA-20:17.usb</link></entry>
	      <entry>9&nbsp;June&nbsp;2020</entry>
	      <entry><para><acronym>HID</acronym> descriptor parsing
		error</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:19.unbound.asc">FreeBSD-SA-20:19.unbound</link></entry>
	      <entry>8&nbsp;July&nbsp;2020</entry>
	      <entry><para>Multiple vulnerabilities</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:20.ipv6.asc">FreeBSD-SA-20:20.ipv6</link></entry>
	      <entry>8&nbsp;July&nbsp;2020</entry>
	      <entry><para>Race condition and use-after-free</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:21.usb_net.asc">FreeBSD-SA-20:21.usb_net</link></entry>
	      <entry>5&nbsp;August&nbsp;2020</entry>
	      <entry><para>Memory corruption</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:22.sqlite.asc">FreeBSD-SA-20:22.sqlite</link></entry>
	      <entry>5&nbsp;August&nbsp;2020</entry>
	      <entry><para>Multiple vulnerabilities</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:23.sendmsg.asc">FreeBSD-SA-20:23.sendmsg</link></entry>
	      <entry>5&nbsp;August&nbsp;2020</entry>
	      <entry><para>Privilege escalation</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:25.sctp.asc">FreeBSD-SA-20:25.sctp</link></entry>
	      <entry>2&nbsp;September&nbsp;2020</entry>
	      <entry><para>Use-after-free bug</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:26.dhclient.asc">FreeBSD-SA-20:26.dhclient</link></entry>
	      <entry>2&nbsp;September&nbsp;2020</entry>
	      <entry><para>Heap overflow</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:27.ure.asc">FreeBSD-SA-20:27.ure</link></entry>
	      <entry>15&nbsp;September&nbsp;2020</entry>
	      <entry><para>Packet-in-packet attack</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:28.bhyve_vmcs.asc">FreeBSD-SA-20:28.bhyve_vmcs</link></entry>
	      <entry>15&nbsp;September&nbsp;2020</entry>
	      <entry><para>Privilege escalation via VMCS</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:29.bhyve_svm.asc">FreeBSD-SA-20:29.bhyve_svm</link></entry>
	      <entry>15&nbsp;September&nbsp;2020</entry>
	      <entry><para>SVM guest escape</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-SA-20:30.ftpd.asc">FreeBSD-SA-20:30.ftpd</link></entry>
	      <entry>15&nbsp;September&nbsp;2020</entry>
	      <entry><para>Privilege escalation</para></entry>
	    </row>
	  </tbody>
	</tgroup>
      </informaltable>
    </sect2>

    <sect2 xml:id="errata">
      <title>Errata Notices</title>

      <informaltable frame="none" pgwide="1">
	<tgroup cols="3">
	  <colspec colwidth="40%"/>
	  <colspec colwidth="30%"/>
	  <colspec colwidth="30%"/>
	  <thead>
	    <row>
	      <entry>Errata</entry>
	      <entry>Date</entry>
	      <entry>Topic</entry>
	    </row>
	  </thead>

	  <tbody>
	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-EN-19:19.loader.asc">FreeBSD-EN-19:19.loader</link></entry>
	      <entry>12&nbsp;November&nbsp;2019</entry>
	      <entry><para>UEFI Loader Memory Fragmentation</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-EN-20:01.ssp.asc">FreeBSD-EN-20:01.ssp</link></entry>
	      <entry>28&nbsp;January&nbsp;2020</entry>
	      <entry><para>Imprecise orderring of canary
		initialization</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-EN-20:03.sshd.asc">FreeBSD-EN-20:03.sshd</link></entry>
	      <entry>18&nbsp;March&nbsp;2020</entry>
	      <entry><para>Misleading log messages upon successful
		login</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-EN-20:05.mlx5en.asc">FreeBSD-EN-20:05.mlx5en</link></entry>
	      <entry>18&nbsp;March&nbsp;2020</entry>
	      <entry><para>Fix packet forwarding performance</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-EN-20:06.ipv6.asc">FreeBSD-EN-20:06.ipv6</link></entry>
	      <entry>18&nbsp;March&nbsp;2020</entry>
	      <entry><para>Incorrect checksum calculations</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-EN-20:07.quotad.asc">FreeBSD-EN-20:07.quotad</link></entry>
	      <entry>21&nbsp;April&nbsp;2020</entry>
	      <entry><para>Regression with certain <acronym>NFS</acronym>
		servers</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-EN-20:08.tzdata.asc">FreeBSD-EN-20:08.tzdata</link></entry>
	      <entry>12&nbsp;May&nbsp;2020</entry>
	      <entry><para>Timezone database update</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-EN-20:09.igb.asc">FreeBSD-EN-20:09.igb</link></entry>
	      <entry>12&nbsp;May&nbsp;2020</entry>
	      <entry><para>Fix failure to switch to inactive
		state</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-EN-20:10.build.asc">FreeBSD-EN-20:10.build</link></entry>
	      <entry>12&nbsp;May&nbsp;2020</entry>
	      <entry><para>Incorrect build host clang version
		detection</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-EN-20:11.ena.asc">FreeBSD-EN-20:11.ena</link></entry>
	      <entry>9&nbsp;June&nbsp;2020</entry>
	      <entry><para>Stability issues in &man.ena.4;</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-EN-20:12.iflib.asc">FreeBSD-EN-20:12.iflib</link></entry>
	      <entry>9&nbsp;June&nbsp;2020</entry>
	      <entry><para>Watchdog timeout resetting idle
		queues</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-EN-20:13.bhyve.asc">FreeBSD-EN-20:13.bhyve</link></entry>
	      <entry>8&nbsp;July&nbsp;2020</entry>
	      <entry><para>Crash with PCI device passthrough</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-EN-20:14.linuxkpi.asc">FreeBSD-EN-20:14.linuxkpi</link></entry>
	      <entry>8&nbsp;July&nbsp;2020</entry>
	      <entry><para>Kernel panic</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-EN-20:15.mps.asc">FreeBSD-EN-20:15.mps</link></entry>
	      <entry>8&nbsp;July&nbsp;2020</entry>
	      <entry><para>Kernel panic</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-EN-20:16.vmx.asc">FreeBSD-EN-20:16.vmx</link></entry>
	      <entry>5&nbsp;August&nbsp;2020</entry>
	      <entry><para>Packet loss and degraded
		performance</para></entry>
	    </row>

	    <row>
	      <entry><link
		xlink:href="&security.url;/FreeBSD-EN-20:17.linuxthread.asc">FreeBSD-EN-20:17.linuxthread</link></entry>
	      <entry>2&nbsp;September&nbsp;2020</entry>
	      <entry><para>Kernel panic</para></entry>
	    </row>
	  </tbody>
	</tgroup>
      </informaltable>
    </sect2>
  </sect1>

  <sect1 xml:id="userland">
    <title>Userland</title>

    <para>This section covers changes and additions to userland
      applications, contributed software, and system utilities.</para>

    <sect2 xml:id="userland-config">
      <title>Userland Configuration Changes</title>

      <para>&nbsp;</para>
    </sect2>

    <sect2 xml:id="userland-programs">
      <title>Userland Application Changes</title>

      <para revision="355520">The &man.dd.1; utility has been updated
	to include new operands:</para>

      <itemizedlist>
	<listitem>
	  <para><literal>conv=fsync</literal></para>
	</listitem>

	<listitem>
	  <para><literal>conf=fdatasync</literal></para>
	</listitem>

	<listitem>
	  <para><literal>oflag=fsync</literal></para>
	</listitem>

	<listitem>
	  <para><literal>oflag=sync</literal></para>
	</listitem>

	<listitem>
	  <para><literal>iflag=fullblock</literal></para>
	</listitem>
      </itemizedlist>

      <para>See &man.dd.1; for usage details.</para>
    </sect2>

    <sect2 xml:id="userland-contrib">
      <title>Contributed Software</title>

      <para revision="354191" contrib="sponsor"
	sponsor="&darpa_afrl;">The &man.tcsh.1; utility has been
	updated to version 6.21.00.</para>

      <para revision="355503">The &man.less.1; utility has been
	updated to version v551.</para>

      <para revision="355603">The &man.libbsdxml.3; library has
	been updated to version 2.2.9.</para>

      <para revision="355745">The &man.resolvconf.8; utility has
	been updated to version 3.9.2.</para>

      <para revision="356340">The &man.pcap.3; library has been
	updated to version 1.9.1.</para>

      <para revision="356340">The &man.tcpdump.1; utility has been
	updated to version 4.9.3.</para>

      <para revision="356532">The &man.mtree.8; utility has been
	updated to address an issue with <literal>-f</literal> not
	considering type changes, fix username logic with
	<literal>-c</literal> when &man.getlogin.2; fails, and to fix
	<literal>-O</literal> not descending when a hash collision
	occurs.</para>

      <para revision="358779" contrib="sponsor" sponsor="&ff;">The
	Elf Tool Chain has been updated to upstream revision
	r3769.</para>

      <para revision="359635">The &man.xz.1; utility has been updated
	to version 5.2.5.</para>

      <para revision="360278"><application>OpenSSL</application> has
	been updated to version 1.1.1g.</para>

      <para revision="360313" contrib="sponsor"
	sponsor="&ff;"><application>OpenSSH</application> has been
	updated to version 7.9p1.</para>

      <para revision="360361">The timezone database files have been
	updated to version 2020a.</para>

      <para revision="361435">The &man.unbound.8; utility has been
	updated to version 1.10.1.</para>

      <para revision="362132">The &man.libarchive.3; library has been
	updated to version 3.4.3.</para>

      <para revision="362180">The private
	<application>apr</application> library has been updated to
	version 1.7.0.</para>

      <para revision="362180">The
	<application>svn{,lite}</application> utility has been updated
	to version 1.14.0 LTS.</para>

      <para revision="362716">The &man.ntpd.8; suite of utilities have
	been updated to version 4.2.8p15.</para>

      <para revision="362842">The &man.file.1; utility has been
	updated to version 5.39.</para>

      <para revision="362987">The &man.bc.1; utility has been updated
	to version 3.1.1.</para>

      <para revision="363179">The private
	<application>sqlite3</application> utility has been updated to
	version 3.32.3.</para>

      <para revision="363352">The <acronym>BSD</acronym> &man.make.1;
	utility has been updated to version 20200719.</para>

      <para revision="363465">The <application>Sendmail</application>
	utility has been updated to version 8.16.1.</para>

      <para revision="363474">The &man.nc.1; utility has been updated
	to include a new <literal>--sctp</literal> flag.</para>

      <para revision="363494">The <application>clang</application>,
	<application>llvm</application>,
	<application>lld</application>,
	<application>lldb</application>,
	<application>compiler-rt</application> utilities and
	<application>libc++</application> have been updated to version
	10.0.1.</para>
    </sect2>

    <sect2 xml:id="userland-deprecated-programs">
      <title>Deprecated Applications</title>

      <para revision="355075">The &man.amd.8; utility has been marked
	as deprecated, and targeted for removal in
	&os;&nbsp;13.0.</para>
    </sect2>

    <sect2 xml:id="userland-libraries">
      <title>Runtime Libraries and API</title>

      <para>&nbsp;</para>
    </sect2>
  </sect1>

  <sect1 xml:id="kernel">
    <title>Kernel</title>

    <para>This section covers changes to kernel configurations, system
      tuning, and system control parameters that are not otherwise
      categorized.</para>

    <sect2 xml:id="kernel-general">
      <title>General Kernel Changes</title>

      <para revision="363017">The &man.read.2; system call has been
	changed to disable <function>read()</function> calls on
	directories by default.  A new &man.sysctl.8; has been added,
	<literal>security.bsd.allow_read_dir</literal>, which when set
	to <literal>1</literal> will restore the previous
	behavior.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="drivers">
    <title>Devices and Drivers</title>

    <para>This section covers changes and additions to devices and
      device drivers since &release.prev;.</para>

    <sect2 xml:id="drivers-device">
      <title>Device Drivers</title>

      <para>&nbsp;</para>
    </sect2>
  </sect1>

  <sect1 xml:id="storage">
    <title>Storage</title>

    <para>This section covers changes and additions to file systems
      and other storage subsystems, both local and networked.</para>

    <sect2 xml:id="storage-general">
      <title>General Storage</title>

      <para>&nbsp;</para>
    </sect2>
  </sect1>

  <sect1 xml:id="boot">
    <title>Boot Loader Changes</title>

    <para>This section covers the boot loader, boot menu, and other
      boot-related changes.</para>

    <sect2 xml:id="boot-loader">
      <title>Boot Loader Changes</title>

      <para>&nbsp;</para>
    </sect2>
  </sect1>

  <sect1 xml:id="network">
    <title>Networking</title>

    <para>This section describes changes that affect networking in
      &os;.</para>

    <sect2 xml:id="network-general">
      <title>General Network</title>

      <para>&nbsp;</para>
    </sect2>
  </sect1>

  <sect1 xml:id="ports">
    <title>Ports Collection and Package Infrastructure</title>

    <para>This section covers changes to the &os;&nbsp;Ports
      Collection, package infrastructure, and package maintenance and
      installation tools.</para>

    <sect2 xml:id="ports-packages ">
      <title>Packaging Changes</title>

      <para>&nbsp;</para>
    </sect2>
  </sect1>

  <sect1 xml:id="future-releases">
    <title>General Notes Regarding Future &os; Releases</title>

    <sect2 xml:id="future-releases-cputype">
      <title>Default <varname>CPUTYPE</varname> Change</title>

      <para>Starting with &os;-13.0, the default
	<varname>CPUTYPE</varname> for the &arch.i386;
	architecture will change from <literal>486</literal> to
	<literal>686</literal>.</para>

      <para>This means that, by default, binaries produced will
	require a 686-class <acronym>CPU</acronym>, including but
	not limited to binaries provided by the &os;&nbsp;Release
	Engineering team.  &os;&nbsp;13.0 will continue to support
	older <acronym>CPU</acronym>s, however users needing this
	functionality will need to build their own releases for
	official support.</para>

      <para>As the primary use for i486 and i586
	<acronym>CPU</acronym>s is generally in the embedded market,
	the general end-user impact is expected to be minimal, as new
	hardware with these <acronym>CPU</acronym> types has long
	faded, and much of the deployed base of such systems is
	nearing retirement age, statistically.</para>

      <para>There were several factors taken into account for this
	change.  For example, i486 does not have 64-bit atomics, and
	while they can be emulated in the kernel, they cannot be
	emulated in the userland.  Additionally, the 32-bit amd64
	libraries have been i686 since their inception.</para>

      <para>As the majority of 32-bit testing is done by developers
	using the lib32 libraries on 64-bit hardware with the
	<varname>COMPAT_FREEBSD32</varname> option in the kernel,
	this change ensures better coverage and user experience.
	This also aligns with what the majority of &linux;
	distributions have been doing for quite some time.</para>

      <para>This is expected to be the final bump of the default
	<varname>CPUTYPE</varname> in &arch.i386;.</para>

      <para>
	<important>
	  <para>This change does not affect the &os;&nbsp;12.x or
	    11.x series of releases.</para>
	</important>
      </para>
    </sect2>
  </sect1>
</article>