article.xml revision 363469
1<?xml version="1.0" encoding="iso-8859-1"?>
2<!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
3	"../../../share/xml/freebsd50.dtd" [
4<!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN" "release.ent">
5 %release;
6<!ENTITY % sponsor PUBLIC "-//FreeBSD//ENTITIES Sponsor Specification//EN" "sponsor.ent">
7 %sponsor;
8<!ENTITY % vendor PUBLIC "-//FreeBSD//ENTITIES Vendor Specification//EN" "vendor.ent">
9 %vendor;
10<!ENTITY security SYSTEM "../../share/xml/security.xml">
11<!ENTITY errata SYSTEM "../../share/xml/errata.xml">
12]>
13<article xmlns="http://docbook.org/ns/docbook"
14  xmlns:xlink="http://www.w3.org/1999/xlink"
15  xml:id="top"
16  version="5.0">
17
18  <info>
19    <title>&os; &release.current; Release Notes</title>
20
21    <author>
22      <orgname>The &os; Project</orgname>
23    </author>
24
25    <pubdate>$FreeBSD: stable/11/release/doc/en_US.ISO8859-1/relnotes/article.xml 363469 2020-07-24 01:25:57Z gshapiro $</pubdate>
26
27    <!-- Last rev: 288943 -->
28
29    <copyright>
30      <year>2019</year>
31      <holder role="mailto:doc@FreeBSD.org">The &os; Documentation
32	Project</holder>
33    </copyright>
34
35    <legalnotice xml:id="trademarks" role="trademarks">
36      &tm-attrib.freebsd;
37      &tm-attrib.ibm;
38      &tm-attrib.ieee;
39      &tm-attrib.intel;
40      &tm-attrib.sparc;
41      &tm-attrib.general;
42    </legalnotice>
43
44    <abstract>
45      <para>The release notes for &os; &release.current; contain
46	a summary of the changes made to the &os; base system on the
47	&release.branch; development line.  This document lists
48	applicable security advisories that were issued since the last
49	release, as well as significant changes to the &os; kernel and
50	userland.  Some brief remarks on upgrading are also
51	presented.</para>
52    </abstract>
53  </info>
54
55  <sect1 xml:id="intro">
56    <title>Introduction</title>
57
58    <para>This document contains the release notes for &os;
59      &release.current;.  It describes recently added, changed, or
60      deleted features of &os;.  It also provides some notes on
61      upgrading from previous versions of &os;.</para>
62
63    <para releasetype="current">The &release.type; distribution to
64      which these release notes apply represents the latest point
65      along the &release.branch; development branch since
66      &release.branch; was created.  Information regarding pre-built,
67      binary &release.type; distributions along this branch can be
68      found at <uri
69	xlink:href="&release.url;">&release.url;</uri>.</para>
70
71    <para releasetype="snapshot">The &release.type; distribution to
72      which these release notes apply represents a point along the
73      &release.branch; development branch between &release.prev; and
74      the future &release.next;.  Information regarding pre-built,
75      binary &release.type; distributions along this branch can be
76      found at <uri
77	xlink:href="&release.url;">&release.url;</uri>.</para>
78
79    <para releasetype="release">This distribution of &os;
80      &release.current; is a &release.type; distribution.  It can be
81      found at <uri xlink:href="&release.url;">&release.url;</uri> or
82      any of its mirrors.  More information on obtaining this (or
83      other) &release.type; distributions of &os; can be found in the
84      <link
85	xlink:href="&url.books.handbook;/mirrors.html"><quote>Obtaining
86	  &os;</quote> appendix</link> to the <link
87	xlink:href="&url.books.handbook;/">&os;
88	Handbook</link>.</para>
89
90    <para>All users are encouraged to consult the release errata
91      before installing &os;.  The errata document is updated with
92      <quote>late-breaking</quote> information discovered late in the
93      release cycle or after the release.  Typically, it contains
94      information on known bugs, security advisories, and corrections
95      to documentation.  An up-to-date copy of the errata for &os;
96      &release.current; can be found on the &os; Web site.</para>
97
98    <para>This document describes the most user-visible new or changed
99      features in &os; since &release.prev;.  In general, changes
100      described here are unique to the &release.branch; branch unless
101      specifically marked as &merged; features.</para>
102
103    <para>Typical release note items document recent security
104      advisories issued after &release.prev;, new drivers or hardware
105      support, new commands or options, major bug fixes, or
106      contributed software upgrades.  They may also list changes to
107      major ports/packages or release engineering practices.  Clearly
108      the release notes cannot list every single change made to &os;
109      between releases; this document focuses primarily on security
110      advisories, user-visible changes, and major architectural
111      improvements.</para>
112  </sect1>
113
114  <sect1 xml:id="upgrade">
115    <title>Upgrading from Previous Releases of &os;</title>
116
117    <para arch="amd64,i386">Binary upgrades between RELEASE versions
118      (and snapshots of the various security branches) are supported
119      using the &man.freebsd-update.8; utility.  The binary upgrade
120      procedure will update unmodified userland utilities, as well as
121      unmodified GENERIC kernels distributed as a part of an official
122      &os; release.  The &man.freebsd-update.8; utility requires that
123      the host being upgraded have Internet connectivity.</para>
124
125    <para>Source-based upgrades (those based on recompiling the &os;
126      base system from source code) from previous versions are
127      supported, according to the instructions in
128      <filename>/usr/src/UPDATING</filename>.</para>
129
130    <important>
131      <para>Upgrading &os; should only be attempted after backing up
132	<emphasis>all</emphasis> data and configuration files.</para>
133    </important>
134  </sect1>
135
136  <sect1 xml:id="security-errata">
137    <title>Security and Errata</title>
138
139    <para>This section lists the various Security Advisories and
140      Errata Notices since &release.prev;.</para>
141
142    <sect2 xml:id="security">
143      <title>Security Advisories</title>
144
145      &security;
146    </sect2>
147
148    <sect2 xml:id="errata">
149      <title>Errata Notices</title>
150
151      &errata;
152    </sect2>
153  </sect1>
154
155  <sect1 xml:id="userland">
156    <title>Userland</title>
157
158    <para>This section covers changes and additions to userland
159      applications, contributed software, and system utilities.</para>
160
161    <sect2 xml:id="userland-config">
162      <title>Userland Configuration Changes</title>
163
164      <para revision="339446">The &man.jail.8; utility has been
165	updated to include a new &man.jail.conf.5; parameter,
166	<literal>allow.read_msgbuf</literal>, which prevents jailed
167	processes and users from accessing the &man.dmesg.8; buffer.
168	This parameter is set to <literal>false</literal> by
169	default.</para>
170
171      <para revision="342103">The system &man.crontab.5;,
172	<filename>/etc/crontab</filename>, has been updated to set
173	<varname>PATH</varname> for consistency with the &man.cron.8;
174	daemon.</para>
175
176      <para revision="343469">The default &man.devd.conf.5; has been
177	updated to prevent duplicated &man.hostapd.8; and
178	&man.wpa.supplicant.8; startup via &man.devd.8;.</para>
179    </sect2>
180
181    <sect2 xml:id="userland-programs">
182      <title>Userland Application Changes</title>
183
184      <para revision="336040">The &man.cpuset.1;, &man.sockstat.1;,
185	&man.ipfw.8;, and &man.ugidfw.8; utilities have been updated
186	to support &man.jail.8; names.</para>
187
188      <para revision="336328">The &man.newfs.msdos.8; utililty has
189	been updated to include a new flag, <literal>-T</literal>,
190	which is used to specify the timestamp for build
191	reproducibility.</para>
192
193      <para revision="338364">The &man.dd.1; utility has been updated
194	to add a new <literal>status</literal>operand,
195	<literal>progress</literal>, which reports the current status
196	on a single line every second.</para>
197
198      <para revision="338451">The &man.last.1; utility has been
199	updated to include &man.libxo.3; support.</para>
200
201      <para revision="338452">The &man.lastlogin.8; utility has been
202	updated to include &man.libxo.3; support.</para>
203
204      <para revision="338475">The &man.traceroute.8; utility has been
205	updated to include &man.libcasper.3; support.</para>
206
207      <para revision="339160">The &man.diff.1; utility has been
208	updated to implement <literal>-B</literal> and
209	<literal>--ignore-blank-lines</literal> support.</para>
210
211      <para revision="340963">The &man.makewhatis.1; utility has been
212	updated to prevent operating within read-only
213	directories.</para>
214
215      <para revision="341790">The &man.jail.8; utility has been
216	updated to add a new flag, <literal>-e</literal>, which takes
217	a &man.jail.conf.5; parameter as an argument and prints a list
218	of non-wildcard jails with the specified parameter.</para>
219
220      <para revision="342706">The &man.ktrdump.8; utility has been
221	updated to include the <literal>-l</literal> flag which
222	enables &quot;live&quot; mode when specified.</para>
223
224      <para revision="343118">The &man.trim.8; utility has been added,
225	which deletes content for blocks on flash-based storage
226	devices that use wear-leveling algorithms.</para>
227
228      <para revision="343251">The &man.gzip.1; utility has been
229	updated to add <literal>-l</literal> support for &man.xz.1;
230	files.</para>
231
232      <para revision="343538" contrib="sponsor"
233	sponsor="&netflix;">The &man.newfs.8; and &man.tunefs.8;
234	utilities have been updated to allow underscores in label
235	names.</para>
236
237      <para revision="344020">The &man.pfctl.8; utility has been
238	updated to provide clearer output and reference the
239	<literal>net.pf.request_maxcount</literal> &man.sysctl.8;
240	if a defined table is too large.</para>
241
242      <para revision="344052">The &man.newfs.8; and &man.tunefs.8;
243	utilities have been updated to allow dashes in label
244	names.</para>
245
246      <para revision="344490">The &man.fdisk.8; utility has been
247	updated to support sectors larger than 2048 bytes.</para>
248
249      <para revision="345561">The &man.sh.1; utility has been updated
250	to add the <literal>pipefail</literal> option which simplifies
251	checking the exit status of all commands in a pipeline.</para>
252
253      <para revision="345878">The &man.patch.1; utility has been
254	updated to exit successfully if the input patch file is
255	zero-length.</para>
256    </sect2>
257
258    <sect2 xml:id="userland-contrib">
259      <title>Contributed Software</title>
260
261      <para revision="334607">The &man.xz.1; utility has been updated
262	to version 5.2.4.</para>
263
264      <para revision="337827">The &man.file.1; utility has been
265	updated to version 5.34.</para>
266
267      <para revision="338414" contrib="sponsor" sponsor="&ff;">The
268	<application>ELF Tool Chain</application> has been updated to
269	version r3614.</para>
270
271      <para revision="339100" contrib="sponsor" sponsor="&ff;">The
272	<application>lld</application> utility has been updated to add
273	<literal>-z interpose</literal>, marking the object file as
274	an interposer.</para>
275
276      <para revision="343079">The &man.file.1; utility has been
277	updated to fix incorrect date reporting for &man.dump.8;
278	files.</para>
279
280      <para revision="344220">The <application>LUA</application>
281	&man.loader.8; has been merged.</para>
282
283      <para revision="344884">The &man.ntpd.8; utilities have been
284	updated to version 4.2.8p13.</para>
285
286      <para revision="345670">Timezone data files have been updated to
287	version 2019a.</para>
288
289      <para revision="346296">The <application>clang</application>,
290	<application>llvm</application>,
291	<application>lld</application>,
292	<application>lldb</application>, and
293	<application>compiler-rt</application> utilities as well as
294	<application>libc++</application> have been updated to
295	upstream version 8.0.0.</para>
296
297      <para revision="346981">The <application>WPA</application>
298	utilities have been updated to version 2.8.</para>
299
300      <para revision="348343"><application>OpenSSL</application> has
301	been updated to version 1.0.2s.</para>
302
303      <para revision="348607">The &man.libarchive.3; library has been
304	updated to version 3.3.3, with additional fixes from
305	upstream.</para>
306
307      <para revision="348980"><application>OpenPAM</application> has
308	been updated to the latest upstream version.</para>
309
310      <para revision="363466"><application>sendmail</application> has
311	been updated to version 8.16.1.</para>
312    </sect2>
313
314    <sect2 xml:id="userland-installer">
315      <title>Installation and Configuration Tools</title>
316
317      <para>&nbsp;</para>
318    </sect2>
319
320    <sect2 xml:id="userland-rc">
321      <title><filename class="directory">/etc/rc.d</filename>
322	Scripts</title>
323
324      <para revision="340611">Support for auxiliary
325	<acronym>RAM</acronym> has been added to
326	<filename>/etc/rc.initdiskless</filename>.</para>
327
328      <para revision="340966">The &man.rcorder.8; utility has been
329	updated to add support for
330	<filename>/etc/rc.resume</filename>.</para>
331
332      <para revision="341792">The <literal>jail_conf</literal>
333	definition, which defaults to
334	<filename>/etc/jail.conf</filename>, has been moved from
335	the &man.jail.8; &man.rc.8; script to
336	<filename>/etc/defaults/rc.conf</filename>.</para>
337
338      <para revision="343046">The <varname>rc_service</varname>
339	variable has been added to &man.rc.subr.8;, which defaults to
340	the path of the service being executed in case the service
341	needs to re-invoke itself.</para>
342    </sect2>
343
344    <sect2 xml:id="userland-periodic">
345      <title><filename class="directory">/etc/periodic</filename>
346	Scripts</title>
347
348      <para revision="341794">The &man.periodic.8; weekly
349	<filename>340.noid</filename> script has been updated to
350	prevent decending into the root directory of jails.</para>
351    </sect2>
352
353    <sect2 xml:id="userland-libraries">
354      <title>Runtime Libraries and API</title>
355
356      <para revision="335640">The &man.pcap.3; library has been
357	updated to version 1.9.0 (pre-release).</para>
358
359      <para revision="336449">The &man.setproctitle.fast.3; function
360	has been added, which is optimized for high-frequency process
361	title updates.</para>
362
363      <para revision="337418" contrib="sponsor"
364	sponsor="&dellemc;">The &man.kqueue.2; system call has been
365	updated to allow updating
366	<literal>EVFILT_TIMER</literal>.</para>
367
368      <para revision="338405">The &man.pthread.get.name.np.3; function
369	has been added, which is used to retrieve the function name
370	associated with a thread.</para>
371
372      <para revision="338707">The &man.pthread.3; library has been
373	updated to improve <acronym>POSIX</acronym> compliance.</para>
374    </sect2>
375
376    <sect2 xml:id="userland-abi">
377      <title>ABI Compatibility</title>
378
379      <para>&nbsp;</para>
380    </sect2>
381
382    <sect2 xml:id="userland-debug">
383      <title>Userland Debugging</title>
384
385      <para>&nbsp;</para>
386    </sect2>
387  </sect1>
388
389  <sect1 xml:id="kernel">
390    <title>Kernel</title>
391
392    <para>This section covers changes to kernel configurations, system
393      tuning, and system control parameters that are not otherwise
394      categorized.</para>
395
396    <sect2 xml:id="kernel-general">
397      <title>General Kernel Changes</title>
398
399      <para revision="339857" contrib="sponsor"
400	sponsor="&panzura;">The &man.ddb.4; debugging utility has been
401	updated to print command-line arguments to a process.</para>
402
403      <para revision="342656">The number of <acronym>MSI</acronym>
404	<acronym>IRQ</acronym>s have been converted from a constant to
405	a tunable.  The default remains at <literal>512</literal>,
406	which can now be changed during boot with the
407	<literal>machdep.num_msi_irqs</literal> &man.sysctl.8;.</para>
408
409      <para revision="343084" contrib="sponsor"
410	sponsor="&modirum;">The kernel will now log the &man.jail.8;
411	<acronym>ID</acronym> when logging a process exit.  The
412	&man.jail.8; <acronym>ID</acronym> <literal>0</literal>
413	represents processes that are not jailed.</para>
414
415      <para revision="348753">Warnings for features deprecated in
416	future releases will now be printed on all &os;
417	versions.</para>
418    </sect2>
419
420    <sect2 xml:id="kernel-bugfix">
421      <title>Kernel Bug Fixes</title>
422
423      <para>&nbsp;</para>
424    </sect2>
425
426    <sect2 xml:id="kernel-config">
427      <title>Kernel Configuration</title>
428
429      <para>&nbsp;</para>
430    </sect2>
431
432    <sect2 xml:id="kernel-modules">
433      <title>Kernel Modules</title>
434
435      <para>&nbsp;</para>
436    </sect2>
437
438    <sect2 xml:id="kernel-sysctl">
439      <title>System Tuning and Controls</title>
440
441      <para>&nbsp;</para>
442    </sect2>
443  </sect1>
444
445  <sect1 xml:id="drivers">
446    <title>Devices and Drivers</title>
447
448    <para>This section covers changes and additions to devices and
449      device drivers since &release.prev;.</para>
450
451    <sect2 xml:id="drivers-device">
452      <title>Device Drivers</title>
453
454      <para revision="340182" contrib="sponsor"
455	sponsor="&panzura;">The &man.ichwd.4; driver has been updated
456	to include support for <acronym>TCO</acronym> watchdog timers
457	in the Lewisburg <acronym>PCH</acronym> (C620) chipset.</para>
458
459      <para revision="345981">The &man.random.4; driver has been
460	updated to improve performance during expensive
461	reseeding.</para>
462    </sect2>
463
464    <sect2 xml:id="drivers-storage">
465      <title>Storage Drivers</title>
466
467      <para>&nbsp;</para>
468    </sect2>
469
470    <sect2 xml:id="drivers-network">
471      <title>Network Drivers</title>
472
473      <para revision="340369">The TP-Link&reg; TL-WN321G&trade;
474	network adapter now uses the &man.run.4; driver instead of the
475	&man.rum.4; driver.</para>
476
477      <para revision="342206" contrib="sponsor" sponsor="&ix;">The
478	&man.lagg.4; driver has been updated to allow changing the
479	<acronym>MTU</acronym> without requiring destroying and
480	recreating the interface.</para>
481
482      <para revision="345040" contrib="sponsor"
483	sponsor="&chelsio;">The &man.ccr.4; driver has been added,
484	providing support for Chelsio&reg; T6&trade; cryptography
485	accelerators.</para>
486
487      <para revision="346855" contrib="sponsor"
488	sponsor="&chelsio;">The &man.cxgbe.4; driver has been updated
489	to include support for hash filters, <acronym>NAT</acronym>
490	offloading, and
491	<acronym>SMAC</acronym>/<acronym>DMAC</acronym> swapping
492	filters.</para>
493
494      <para revision="346940" contrib="sponsor"
495	sponsor="&chelsio;">The &man.cxgbe.4; T4, T5, and T6 firmware
496	has been updated to version 1.23.0.0.</para>
497    </sect2>
498  </sect1>
499
500  <sect1 xml:id="hardware">
501    <title>Hardware Support</title>
502
503    <para>This section covers general hardware support for physical
504      machines, hypervisors, and virtualization environments, as well
505      as hardware changes and updates that do not otherwise fit in
506      other sections of this document.</para>
507
508    <sect2 xml:id="hardware-support">
509      <title>Hardware Support</title>
510
511      <para revision="342254">The &man.vt.4; keyboard mapping has been
512	updated to include <literal>uk.macbook.kbd</literal>
513	support.</para>
514    </sect2>
515
516    <sect2 xml:id="hardware-virtualization">
517      <title>Virtualization Support</title>
518
519      <para revision="341758" contrib="sponsor" sponsor="&ix;">Support
520	for <acronym>PS/2</acronym> scan codes for
521	<literal>NumLock</literal>, <literal>ScrollLock</literal>, and
522	numerical keypad keys has been added to &man.bhyve.8;.</para>
523    </sect2>
524
525    <sect2 xml:id="hardware-arm">
526      <title>ARM Support</title>
527
528      <para>&nbsp;</para>
529    </sect2>
530  </sect1>
531
532  <sect1 xml:id="storage">
533    <title>Storage</title>
534
535    <para>This section covers changes and additions to file systems
536      and other storage subsystems, both local and networked.</para>
537
538    <sect2 xml:id="storage-general">
539      <title>General Storage</title>
540
541      <para revision="348588">Deprecation warnings have been added for
542	weaker algorithms when creating &man.geli.8; providers.</para>
543    </sect2>
544
545    <sect2 xml:id="storage-net">
546      <title>Networked Storage</title>
547
548      <para>&nbsp;</para>
549    </sect2>
550
551    <sect2 xml:id="storage-zfs">
552      <title>ZFS</title>
553
554      <para revision="341828" contrib="sponsor" sponsor="&klara;">An
555	issue that could result in a system hang during
556	<acronym>ZFS</acronym> vnode reclamation has been
557	fixed.</para>
558
559      <para revision="346690" contrib="sponsor" sponsor="&gandi;">The
560	<acronym>ZFS</acronym> filesystem has been updated to
561	implement parallel mounting.</para>
562    </sect2>
563
564    <sect2 xml:id="storage-geom">
565      <title><literal>geom(4)</literal></title>
566
567      <para>&nbsp;</para>
568    </sect2>
569  </sect1>
570
571  <sect1 xml:id="boot">
572    <title>Boot Loader Changes</title>
573
574    <para>This section covers the boot loader, boot menu, and other
575      boot-related changes.</para>
576
577    <sect2 xml:id="boot-loader">
578      <title>Boot Loader Changes</title>
579
580      <para revision="344399">The functionality provided by
581	<filename>zfsloader</filename> has been added to
582	&man.loader.8;.  Once the system boot blocks have been updated
583	following <filename>UPDATING</filename>,
584	<filename>zfsloader</filename> is no longer needed.  A hard
585	link to &man.loader.8; has been added to ease in the
586	transition.</para>
587
588      <para revision="344399">The &man.loader.8; has been updated to
589	extend &man.geli.8; support to all architectures.</para>
590
591      <para revision="344403">The <acronym>UEFI</acronym> boot
592	&man.loader.8; has been updated to better determine the system
593	console type and device if not defined in
594	&man.loader.conf.5;.</para>
595    </sect2>
596
597    <sect2 xml:id="boot-menu">
598      <title>Boot Menu Changes</title>
599
600      <para>&nbsp;</para>
601    </sect2>
602  </sect1>
603
604  <sect1 xml:id="network">
605    <title>Networking</title>
606
607    <para>This section describes changes that affect networking in
608      &os;.</para>
609
610    <sect2 xml:id="network-general">
611      <title>General Network Changes</title>
612
613      <para revision="337461">The &man.ipfw.8; firewall has been
614	updated to include new rule options,
615	<literal>record-state</literal>, <literal>set-limit</literal>,
616	and <literal>defer-action</literal>.</para>
617
618      <para revision="346212" contrib="sponsor"
619	sponsor="&yandex;">Support for <acronym>NAT64</acronym>
620	<acronym>CLAT</acronym> has been added, as defined in
621	<acronym>RFC</acronym>6877.</para>
622    </sect2>
623
624    <sect2 xml:id="network-protocols">
625      <title>Network Protocols</title>
626
627      <para>&nbsp;</para>
628    </sect2>
629  </sect1>
630
631  <sect1 xml:id="ports">
632    <title>Ports Collection and Package Infrastructure</title>
633
634    <para>This section covers changes to the &os;&nbsp;Ports
635      Collection, package infrastructure, and package maintenance and
636      installation tools.</para>
637
638    <sect2 xml:id="ports-infrastructure">
639      <title>Infrastructure Changes</title>
640
641      <para>&nbsp;</para>
642    </sect2>
643
644    <sect2 xml:id="ports-packages ">
645      <title>Packaging Changes</title>
646
647      <para>&nbsp;</para>
648    </sect2>
649  </sect1>
650
651  <sect1 xml:id="doc">
652    <title>Documentation</title>
653
654    <para>This section covers changes to the &os;&nbsp;Documentation
655      Project sources and toolchain.</para>
656
657    <sect2 xml:id="doc-sources">
658      <title>Documentation Source Changes</title>
659
660      <para>&nbsp;</para>
661    </sect2>
662
663    <sect2 xml:id="doc-toolchain">
664      <title>Documentation Toolchain Changes</title>
665
666      <para>&nbsp;</para>
667    </sect2>
668  </sect1>
669
670  <sect1 xml:id="releng">
671    <title>Release Engineering and Integration</title>
672
673    <para>This section convers changes that are specific to the
674      &os;&nbsp;Release Engineering processes.</para>
675
676    <sect2 xml:id="releng-changes">
677      <title>Integration Changes</title>
678
679      <para>&nbsp;</para>
680    </sect2>
681  </sect1>
682</article>
683