en_US.ISO8859-1/relnotes/article.xml

<?xml version="1.0" encoding="iso-8859-1"?>
<!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
	"../../../share/xml/freebsd50.dtd" [
<!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN" "release.ent">
	%release;
<!ENTITY % sponsor PUBLIC "-//FreeBSD//ENTITIES Sponsor Specification//EN" "sponsor.ent">
 %sponsor;
<!ENTITY % vendor PUBLIC "-//FreeBSD//ENTITIES Vendor Specification//EN" "vendor.ent">
 %vendor;
]>
<article xmlns="http://docbook.org/ns/docbook" xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0">
  <info>
    <title>&os; &release.current; Release Notes</title>

    <author><orgname>The &os; Project</orgname></author>

    <pubdate>$FreeBSD: releng/9.3/release/doc/en_US.ISO8859-1/relnotes/article.xml 267848 2014-06-25 00:33:30Z gjb $</pubdate>

    <copyright>
      <year>2014</year>
      <holder role="mailto:doc@FreeBSD.org">The &os; Documentation
	Project</holder>
    </copyright>

    <legalnotice xml:id="trademarks" role="trademarks">
      &tm-attrib.freebsd;
      &tm-attrib.ibm;
      &tm-attrib.ieee;
      &tm-attrib.intel;
      &tm-attrib.sparc;
      &tm-attrib.general;
    </legalnotice>

    <abstract>
      <para>The release notes for &os; &release.current; contain
	a summary of the changes made to the &os; base system on the
	&release.branch; development line.  This document lists
	applicable security advisories that were issued since the last
	release, as well as significant changes to the &os; kernel and
	userland.  Some brief remarks on upgrading are also
	presented.</para>
    </abstract>
  </info>

  <sect1 xml:id="intro">
    <title>Introduction</title>

    <para>This document contains the release notes for &os;
      &release.current;.  It describes recently added, changed, or
      deleted features of &os;.  It also provides some notes on
      upgrading from previous versions of &os;.</para>

    <para>This distribution of &os; &release.current; is
      a &release.type; distribution.  It can be found at <uri
	xlink:href="&release.url;">&release.url;</uri> or any of its
      mirrors.  More information on obtaining this (or other)
      &release.type; distributions of &os; can be found in the <link
	xlink:href="&url.books.handbook;/mirrors.html"><quote>Obtaining
	  &os;</quote> appendix</link> to the <link
	xlink:href="&url.books.handbook;/">&os;
	Handbook</link>.</para>

    <para>All users are encouraged to consult the release errata
      before installing &os;.  The errata document is updated with
      <quote>late-breaking</quote> information discovered late in the
      release cycle or after the release.  Typically, it contains
      information on known bugs, security advisories, and corrections
      to documentation.  An up-to-date copy of the errata for &os;
      &release.current; can be found on the &os; Web site.</para>
  </sect1>

  <sect1 xml:id="new">
    <title>What's New</title>

    <para>This section describes the most user-visible new or changed
      features in &os; since &release.prev;.</para>

    <para>Typical release note items document recent security
      advisories issued after &release.prev;, new drivers or hardware
      support, new commands or options, major bug fixes, or
      contributed software upgrades.  They may also list changes to
      major ports/packages or release engineering practices.  Clearly
      the release notes cannot list every single change made to &os;
      between releases; this document focuses primarily on security
      advisories, user-visible changes, and major architectural
      improvements.</para>

    <sect2 xml:id="security">
      <title>Security Advisories</title>

      <para>Problems described in the following security advisories
	have been fixed.  For more information, consult the individual
	advisories available from <uri
	  xlink:href="http://security.FreeBSD.org/">http://security.FreeBSD.org/</uri>.</para>

      <informaltable frame="none" pgwide="1">
	<tgroup cols="3">
	  <colspec colwidth="1*"/>
	  <colspec colwidth="1*"/>
	  <colspec colwidth="3*"/>
	  <thead>
	    <row>
	      <entry>Advisory</entry>
	      <entry>Date</entry>
	      <entry>Topic</entry>
	    </row>
	  </thead>

	  <tbody>
	    <row>
	      <entry><link
		  xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:01.bsnmpd.asc">FreeBSD-SA-14:01.bsnmpd</link></entry>
	      <entry>14&nbsp;January&nbsp;2014</entry>
	      <entry><para>Fix &man.bsnmpd.1; remote denial of service
		  vulnerability</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:02.ntpd.asc">FreeBSD-SA-14:02.ntpd</link></entry>
	      <entry>14&nbsp;January&nbsp;2014</entry>
	      <entry><para>Disable <quote>monitor</quote> feature in
		  &man.ntpd.8; by default</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:04.bind.asc">FreeBSD-SA-14:04.bind</link></entry>
	      <entry>14&nbsp;January&nbsp;2014</entry>
	      <entry><para>Remote denial of service
		  vulnerability</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:05.nfsserver.asc">FreeBSD-SA-14:05.nfsserver</link></entry>
	      <entry>8&nbsp;April&nbsp;2014</entry>
	      <entry><para>Deadlock in the NFS server</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:06.openssl.asc">FreeBSD-SA-14:06.openssl</link></entry>
	      <entry>8&nbsp;April&nbsp;2014</entry>
	      <entry><para>ECDSA side channel leak</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:08.tcp.asc">FreeBSD-SA-14:08.tcp</link></entry>
	      <entry>30&nbsp;April&nbsp;2014</entry>
	      <entry><para>TCP reassembly vulnerability</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:11.sendmail.asc">FreeBSD-SA-14:11.sendmail</link></entry>
	      <entry>26&nbsp;May&nbsp;2014</entry>
	      <entry><para><application>Sendmail</application>
		  improper close-on-exec flag handling</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:12.ktrace.asc">FreeBSD-SA-14:12.ktrace</link></entry>
	      <entry>3&nbsp;June&nbsp;2014</entry>
	      <entry><para>&man.ktrace.1; kernel memory
		  disclosure</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:13.pam.asc">FreeBSD-SA-14:13.pam</link></entry>
	      <entry>3&nbsp;June&nbsp;2014</entry>
	      <entry><para>Incorrect error handling in PAM policy
		  parser</para></entry>
	    </row>

	    <row>
	      <entry><link
		  xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:14.openssl.asc">FreeBSD-SA-14:14.openssl</link></entry>
	      <entry>5&nbsp;June&nbsp;2014</entry>
	      <entry><para>Multiple vulnerabilities</para></entry>
	    </row>

	    <row>
	      <entry><link xlink:href="http://www.freebsd.org/security/advisories/FreeBSD-SA-14:16.file.asc">SA-14:16.file</link></entry>
	      <entry>24&nbsp;June&nbsp;2014</entry>
	      <entry><para>Multiple vulnerabilities</para></entry>
	    </row>
	  </tbody>
	</tgroup>
      </informaltable>
    </sect2>

    <sect2 xml:id="kernel">
      <title>Kernel Changes</title>

      <para revision="256033">The &man.arcmsr.4; driver has been
	updated to version 1.20.00.28.</para>

      <para revision="256437" contrib="sponsor"
	  sponsor="&ff;">The &man.isci.4; driver is now loadable
	via &man.kldload.8;.</para>

      <para revision="256759">System-level &man.sysctl.8; values are
	now exposed to the system for the &man.ixgbe.4; device.</para>

      <para revision="256924">The &man.mfi.4; driver has been updated
	to support MegaRAID Invader controllers.</para>

      <para revision="257119">A kernel panic triggered in
	<literal>zfs_root()</literal> after a failed rollback has
	been fixed.</para>

      <para revision="257125" contrib="sponsor"
	  sponsor="&ff;">A new &man.sysctl.8;,
	<literal>debug.devfs_iosize_max_clamp</literal> has been added
	which enables and disables <literal>SSIZE_MAX</literal>-sized
	I/O requests on &man.devfs.5; files.</para>

      <para revision="257126" contrib="sponsor" sponsor="&ff;">A new
	&man.sysctl.8;, <literal>kern.disallow_high_osrel</literal>,
	has been added which disables executing the images compiled on
	a userland with a higher major version number than the major
	version number of the running kernel.</para>

      <para revision="257253">A kernel panic triggered by unmounting
	a busy &man.zfs.8; filesystem has been fixed.</para>

      <para revision="257373">A deadlock triggered by powering off
	a USB device has been fixed.</para>

      <para revision="258214">The &man.ata.4; driver has been updated
	to support Intel Lynx Point PCH SMBus devices.</para>

      <para revision="258215">The &man.ata.4; driver has been updated
	to support Coleto Creek devices.</para>

      <para revision="258217">The &man.ahci.4; driver has been updated
	to support the PCI-express solid state drive in the
	&apple;&nbsp;MacBook Air (model A1465).</para>

      <para revision="258635">The &man.sysctl.8;
	<literal>vfs.zfs.arc_meta_limit</literal> can now be changed
	at runtime.</para>

      <para revision="258870">The &man.mmap.2; system call has been
	updated to more optimally use superpages and provide support
	for tweaking the alignment of virtual mappings.</para>

      <para revision="258962">A workaround has been implemented
	in the &man.bge.4; driver for hung transmission on BCM5719
	and BCM5720 chipsets.</para>

      <para revision="259002">A kernel panic when listing sysctls
	on a system with <literal>INVARIANTS</literal> enabled has
	been fixed.</para>

      <para revision="259466">A new &man.sysctl.8;,
	<literal>kern.supported_archs</literal> has been added,
	which will list the <envar>MACHINE_ARCH</envar> values
	whose binaries can be run on the system.</para>

      <para revision="259519" contrib="sponsor"
	  sponsor="&spectralogic;">Several problems that could trigger
	kernel panic on &man.kldload.8; and &man.kldunload.8; have
	been fixed.</para>

      <para revision="260082" contrib="sponsor"
	  sponsor="&ff;">A kernel panic triggered by some
	multi-threaded applications has been fixed.</para>

      <para revision="260134">The &man.runfw.4; firmware has been
	renamed from <literal>runfw</literal> to
	<literal>run.fw</literal> for consistency with other firmware
	files.</para>

      <para revision="260433">A new &man.sysctl.8;,
	<literal>kern.panic_reboot_wait_time</literal>, has been
	added.  This allows tuning the amount of time the system
	will wait before rebooting after &man.panic.9;.  The
	<literal>kern.panic_reboot_wait_time</literal> value defaults
	to the kernel configuration option,
	<literal>PANIC_REBOOT_WAIT_TIME</literal>.</para>

      <para revision="260644">Hardware Random Number Generators have
	been disabled by default.</para>

      <para revision="261485">Support for GPS ports has been added
	to the &man.uhso.4; driver.</para>

      <para revision="262116">A memory leak of compressed buffers
	has been fixed in
	<literal>l2arc_write_done()</literal>.</para>

      <para revision="262153">The &man.netmap.4; framework has been
	updated to match the version in <literal>head/</literal>,
	which includes netmap pipes, kqueue support, and enhanced
	VALE switch port.</para>

      <para revision="262175">A deadlock triggered by sending
	a mounted &man.zfs.8; snapshot has been fixed.</para>

      <para revision="262231">Support for SIIG X1 PCI-e has been added
	to &man.ppc.4;.</para>

      <para revision="262564">Support for the ext4 filesystem
	has been enabled, supporting read-only mounts.</para>

      <para revision="262594">A kernel panic triggered by inserting
	a USB ethernet device on VIMAGE-enabled systems has been
	fixed.</para>

      <para revision="262988" contrib="sponsor" sponsor="&ff;">TTM,
	a memory manager used by video
	drivers, has been merged.</para>

      <para revision="263103">Support for
	<literal>/sys/kernel/random/uuid</literal> has been added
	to &man.linprocfs.5;.</para>

      <para revision="263128">A memory leak in the
	<literal>zpool_in_use()</literal> function has been
	fixed.</para>

      <para revision="263391">The
	<literal>extensible_dataset</literal> &man.zpool.8; feature
	has been added.  See &man.zpool-features.7; for more
	information.</para>

      <para revision="263408">A memory leak has been fixed in
	<literal>libzfs</literal>.</para>

      <para revision="263817,263818" contrib="sponsor"
	  sponsor="&ff;">The <literal>vt</literal> driver
	has been merged from <literal>head/</literal>.</para>

      <para revision="265729" contrib="sponsor"
	  sponsor="&lsi;, &spectralogic;">The &man.mpr.4; device has
	been added, providing support for LSI Fusion-MPT 3 12Gb
	SCSI/SATA controllers.</para>

      <para revision="266167">A kernel bug that inhibited proper
	functionality of the <literal>dev.cpu.0.freq</literal>
	&man.sysctl.8; on &intel; processors with Turbo
	Boost&nbsp;&trade; enabled has been fixed.</para>

      <para revision="266269">Support for &man.xen.4;
	hardware-assisted virtualization, <literal>XENHVM</literal>,
	is now available as a loadable module,
	<literal>xenhvm.ko</literal>.</para>

      <sect3 xml:id="proc">
	<title>Hardware Support</title>

	<para revision="261510">Trackpad support for
	  &apple;&nbsp;MacBook products has been added.</para>

	<para revision="261973">The &man.nve.4; driver has been
	  deprecated, and the &man.nfe.4; driver should be used
	  instead.</para>

	<para revision="262968">The &man.mfi.4; driver has been
	  updated to support MegaRAID Fury cards.</para>

	<para revision="263170,263171">The Radeon KMS driver has been
	  added.</para>

	<para revision="263340">The &man.aacraid.4; driver has been
	  updated to version 3.2.5.</para>

	<sect4 xml:id="net-if">
	  <title>Network Interface Support</title>

	  <para revision="257611">The &man.re.4; driver has been
	    updated to add preliminary support for the RTL8106E
	    chipset.</para>

	  <para revision="257614,257616">The &man.re.4; driver has
	    been updated to support the RTL8168G, RTL8168GU and
	    RTL8411B chipsets.</para>

	  <para revision="257618">The &man.re.4; driver has been
	    updated to add preliminary support for the RTL8168EP
	    chipset.</para>

	  <para revision="258586">The &man.oce.4; driver has been
	    updated to version 10.0.664.0.</para>

	  <para revision="258898">The &man.qlxgbe.4; driver has been
	    imported from <literal>head/</literal>.</para>

	  <para revision="258936">The &man.qlxge.4; driver has been
	    imported from <literal>head/</literal>.</para>

	  <para revision="258965">The &man.bge.4; driver has been
	    updated to support the BCM5725 chipset.</para>

	  <para revision="258967">The &man.bge.4; driver has been
	    updated to support the BCM57764, BCM57767, BCM57782,
	    BCM57786 and BCM57787 chipsets.</para>

	  <para revision="259457">The &man.run.4; driver has been
	    updated to support MediaTek/Ralink chipsets RT5370 and
	    RT5372.</para>

	  <para revision="259460">The &man.usb.4; wireless radiotap
	    headers have been realigned, allowing wireless adapters
	    to work on &arch.arm;, &arch.mips;, and other similar
	    platforms where alignment is important.</para>

	  <para revision="260119">The &man.run.4; firmware has been
	    updated to version 0.33.</para>

	  <para revision="260252">The &man.bxe.4; driver has been
	    merged from <literal>head/</literal>, providing support
	    for Broadcom NetXtreme II 10Gb PCIe adapters.</para>

	  <para revision="261865">The &man.run.4; driver has been
	    updated to include support for the MediaTek/Ralink RT3593
	    chipset.</para>

	  <para revision="261933">The &man.run.4; driver has been
	    updated to include support for the DLINK DWA-127 wireless
	    adapter.</para>

	  <para revision="262153">The &man.axge.4; driver has been
	    added.</para>

	  <para revision="262362">The &man.urndis.4; driver has been
	    imported from OpenBSD.</para>

	  <para revision="263582">The &man.bxe.4; driver has been
	    updated to version 1.78.78.</para>
	</sect4>
      </sect3>

      <sect3 xml:id="fs">
	<title>File Systems</title>

	<para revision="263410">The &man.zfs.8; filesystem has been
	  updated to support the <literal>bookmarks</literal>
	  feature.</para>
      </sect3>
    </sect2>

    <sect2 xml:id="userland">
      <title>Userland Changes</title>

      <para revision="256054">A new flag <literal>-c</literal>, has
	been added to &man.pgrep.1; and &man.pkill.1;, which restricts
	the process lookup to the specified login class.</para>

      <para revision="257496">The &man.ddb.8; utility has been updated
	to add <command>show ioapic</command> and <command>show all
	  ioapics</command>.</para>

      <para revision="258183">Setting <literal>nmbcluster</literal>
	values to their current value will now be ignored, instead of
	failing with an error.</para>

      <para revision="258763">The <filename
	  class="directory">/var/cache</filename> directory is now
	created with mode <literal>0755</literal> instead of mode
	<literal>0750</literal>, since this directory is used by
	many third-party applications, which makes dropping group
	privileges impossible.</para>

      <para revision="258818">The &man.uname.1; utility has been
	updated to include the <literal>-U</literal> and
	<literal>-K</literal> flags, which print the
	<envar>__FreeBSD_version</envar> for the running userland
	and kernel, respectively.</para>

      <para revision="258844">The &man.fetch.3; library has been
	updated to support SNI (Server Name Identification), allowing
	to use virtual hosts on HTTPS.</para>

      <para revision="259243">A segmentation fault and internal
	compiler error bug in &man.gcc.1; triggered by throwing
	a warning before parsing any tokens has been fixed.</para>

      <para revision="259269,259406" contrib="vendor"
	  vendor="&google;">Several updates to &man.gcc.1;
	have been imported from Google.</para>

      <para revision="259448">A byte-order bug in the Heimdal
	<literal>gss_pseudo_random()</literal> function which would
	prevent interoperability with other
	<application>Kerberos</application> implementations has been
	fixed.  In particular, this would prevent interoperability
	with the MIT implementation.</para>

      <para revision="260007">The &man.hastctl.8; utility has been
	updated to output the current queue sizes.</para>

      <para revision="260197">The &man.ps.1; utility will no longer
	truncate the <literal>command</literal> output column.</para>

      <para revision="260208">The &man.protect.1; command has been
	added, which allows exempting processes from being killed
	when swap is exhausted.</para>

      <para revision="260507">The &man.gmirror.8; utility now prevents
	deactivating the last component of a mirror.</para>

      <para revision="260507">A new &man.gmirror.8; command,
	<command>gmirror destroy</command>, has been added, which will
	destroy the &man.geom.8; and erase the &man.gmirror.8;
	metadata.</para>

      <para revision="260650">The &man.etcupdate.8; utility, a tool
	for managing updates to files in <filename
	  class="directory">/etc</filename>, has been merged from
	<literal>head/</literal>.</para>

      <para revision="260651">The &man.find.1; utility has been
	updated to fix incorrect behavior with the
	<literal>-lname</literal> and <literal>-ilname</literal>
	flags.</para>

      <para revision="260868,260869">The
	<literal>hw.uart.console</literal> is now always updated when
	the comconsole setup changes.</para>

      <para revision="260909">The &man.kldload.8; utility has been
	updated to display a message directing to &man.dmesg.8;,
	instead of the cryptic message <quote>Exec format
	  error</quote>.</para>

      <para revision="261674">A bug that could trigger an infinite
	loop in KDE and X has been fixed.</para>

      <para revision="262076">The &man.newsyslog.8; utility has been
	changed to use the size of the file, instead of the blocks the
	file takes on the disk to match the behavior documented in
	&man.newsyslog.conf.5;.</para>

      <para revision="262105">A bug in &man.zdb.8; which would cause
	numeric parameters to a flag as being treated as additional
	flags has been fixed.</para>

      <para revision="262124">The default number of &man.nfsd.8;
	threads has been increased from <literal>4</literal> to
	<literal>(8 * N)</literal>, where <literal>N</literal> is
	the number of CPUs as reported by
	<command>sysctl -n hw.ncpu</command>.</para>

      <para revision="262134">The &man.pciconf.8; utility now has
	a <literal>-V</literal> flag, which lists information such
	as serial numbers for each device.</para>

      <para revision="262158">A bug that would allow creating
	a &man.zfs.8; snapshot of an inconsistent dataset has been
	fixed.</para>

      <para revision="262160">Receiving a &man.zfs.8; dataset with
	<command>zfs recv -F</command> now properly destroys any
	snapshots that were created since the incremental source
	snapshot.</para>

      <para revision="263031">Installation from a read-only
	<envar>.OBJDIR</envar> has been fixed.</para>

      <para revision="263031">A new shared library directory,
	<filename class="directory">/usr/lib/private</filename>,
	has been added for internal-use shared libraries.</para>

      <para revision="263031">A default
	<filename>libmap32.conf</filename> has been added, for 32-bit
	applications.</para>

      <para revision="263032">The <literal>libucl</literal> library,
	a JSON-compatible configuration file parsing library, has been
	imported.</para>

      <para revision="263038">The &man.pkg.7; package management
	utility has been syncronized with <literal>head/</literal>.
	This implements binary package signature verification when
	bootstrapping the system with <command>pkg
	  bootstrap</command>.</para>

      <para revision="263042">The system timezone data files have
	been updated to version tzdata2014a.</para>

      <para revision="263212">The NetBSD &man.make.1; utility,
	<command>bmake</command> has been imported for compatibility
	with the &os;&nbsp;Ports Collection.  It is installed as
	<command>bmake</command>, and the <command>make</command>
	remains the &os; version.</para>

      <para revision="263326">The &man.fetch.3; library now
	supports <literal>Last-Modified</literal> timestamps which
	return UTC instead of GMT.</para>

      <para revision="263404">Aliases for the &man.zfs.8; commands
	<literal>list -t snap</literal> and <literal>snap</literal>
	have been added to match &oracle;&nbsp;Solaris 11.</para>

      <para revision="263406">A new flag, <literal>-p</literal>, has
	been added to the &man.zfs.8; <literal>list</literal> command,
	providing output in a parseable form.</para>

      <para revision="263421"><application>OpenPAM</application> has
	been updated to Nummularia (20130907), which incorporates
	several bug fixes and documentation improvements.  The
	&man.openpam.ttyconv.3; library has been completely
	rewritten.</para>

      <para revision="264423">The &man.sh.1; command interpreter has
	been updated to expand assignments after
	<literal>export</literal>, <literal>local</literal>, and
	<literal>readonly</literal> differently.  As result of this
	change, variable assignment such as <literal>local
	  v=&dollar;1</literal> will assign the first positional
	parameter to <literal>v</literal>, even if
	<literal>&dollar;1</literal> contains spaces, and
	<literal>local w=<replaceable>~/myfile</replaceable></literal>
	will expand the tilde (<literal>~</literal>).</para>

      <para revision="264699">The &man.find.1; utility has been
	updated to implement <literal>-ignore_readdir_race</literal>.
	Prior to this change, <literal>-ignore_readdir_race</literal>
	existed as an option for GNU &man.find.1; compatibility, and
	was ignored if specified.  A counter primary,
	<literal>-noignore_readdir_race</literal> now also exists, and
	is the default behavior.</para>

      <para revision="266286">The &man.ps.1; utility has been updated
	to include the <literal>-J</literal> flag, used to filter
	output by matching &man.jail.8; IDs and names.  Additionally,
	argument <literal>0</literal> can be used to
	<literal>-J</literal> to only list processes running on the
	host system.</para>

      <para revision="266287">The &man.top.1; utility has been updated
	to filter by &man.jail.8; ID or name, in followup to the
	&man.ps.1; change in <literal>r265229</literal>.</para>

      <para revision="266818">The Blowfish &man.crypt.3; default
	format has been changed to
	<literal>&dollar;2b&dollar;</literal>.</para>

      <para revision="267114">The default &man.newsyslog.conf.5; now
	includes files in the
	<filename>/etc/newsyslog.conf.d/</filename> and
	<filename>/usr/local/etc/newsyslog.conf.d/</filename>
	directories by default for &man.newsyslog.8;.</para>

      <para revision="267243">A new flag, <quote>onifconsole</quote>
	has been added to <filename>/etc/ttys</filename>.  This allows
	the system to provide a login prompt via serial console if the
	device is an active kernel console, otherwise it is equivalent
	to <literal>off</literal>.</para>

      <para revision="267379">The &man.arc4random.3; library has been
	updated to match that of &os;-CURRENT.</para>

      <para revision="267411">The &man.pmcstat.8; utility has been
	updated to include a new flag, <literal>-l</literal>, which
	ends event collection after the specified number of
	seconds.</para>

      <sect3 xml:id="periodic-scripts">
	<title>&man.periodic.8; Scripts</title>

	<para revision="263662">The
	  <filename>/etc/periodic/security/800.loginfail</filename>
	  &man.periodic.8; script has been refined to catch more
	  authentication failures and reduce false positives.</para>
      </sect3>

      <sect3 xml:id="rc-scripts">
	<title>&man.rc.8; Scripts</title>

	<para revision="256917">Support for <quote>first boot</quote>
	  scripts has been added to &man.rc.8;.  See &man.rc.8; and
	  &man.rc.conf.5; for implementation details.</para>

	<para revision="260432">The &man.rc.8; system will now
	  re-source &man.rc.conf.5; on receipt of
	  <literal>SIGALRM</literal>.</para>
      </sect3>
    </sect2>

    <sect2 xml:id="contrib">
      <title>Contributed Software</title>

      <para revision="255934">The &man.readline.3; library has been
	updated to version 1.104.</para>

      <para revision="266711"><application>Sendmail</application> has
	been updated to version 8.14.9.</para>

      <para revision="262706" contrib="sponsor"
	  sponsor="&dkhostmaster;"><application>BIND</application> has
	been updated to version 9.9.5.</para>

      <para revision="263286">The &man.xz.1; utility has been updated
	to a post-5.0.5 snapshot.</para>

      <para revision="263970"><application>OpenSSH</application> has
	been updated to version 6.6p1.</para>

      <para revision="267285"><application>OpenSSL</application> has
	been updated to version 0.9.8za.</para>
    </sect2>

    <sect2 xml:id="releng">
      <title>Release Engineering and Integration</title>

      <para revision="260891">As part of the release build, the
	&man.etcupdate.8; utility will bootstrap the system, allowing
	&man.etcupdate.8; to work after the first upgrade of a
	system.</para>

      <para revision="262879" contrib="sponsor"
	  sponsor="&ff;">The <filename>release.sh</filename>
	script and release <filename>Makefile</filename> have been
	updated to use &man.pkg.7; to populate the dvd installation
	medium.</para>

      <para revision="263028">The &man.services.mkdb.8; utility has
	been updated to support multiple byte orders.  Similar to
	&man.cap.mkdb.1;, the <filename>services.db</filename> will
	be created with proper endinanness as part of
	cross-architecture release builds.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="upgrade">
    <title>Upgrading from Previous Releases of &os;</title>

    <sect2>
      <title>Upgrading Using &man.freebsd-update.8; or a Source-Based
	Procedure</title>

      <para arch="amd64,i386">Binary upgrades between RELEASE versions
	(and snapshots of the various security branches) are supported
	using the &man.freebsd-update.8; utility.  The binary upgrade
	procedure will update unmodified userland utilities, as well
	as an unmodified <filename>GENERIC</filename> kernel,
	distributed as a part of an official &os; release.  The
	&man.freebsd-update.8; utility requires that the host being
	upgraded have Internet connectivity.</para>

      <para>Source-based upgrades (those based on recompiling the &os;
	base system from source code) from previous versions are
	supported using to the instructions in
	<filename>/usr/src/UPDATING</filename>.</para>

      <para>For more specific information about upgrading
	instructions, see <uri
	  xlink:href="http://www.FreeBSD.org/releases/9.3R/installation.html">http://www.FreeBSD.org/releases/9.3R/installation.html</uri>.</para>

      <important>
	<para>Upgrading &os; should only be attempted
	  after backing up <emphasis>all</emphasis> data and
	  configuration files.</para>
      </important>
    </sect2>

    <sect2>
      <title xml:id="upgrade-pitfalls">User-Visible
	Incompatibilities</title>

      <para>&os;&nbsp;9.0 and later versions have several
	configuration incompatibilities with earlier versions of &os;.
	These differences are best understood before upgrading.
	<emphasis>Please read this section and the <link
	    xlink:href="http://www.freebsd.org/releases/9.0R/relnotes-detailed.html#UPGRADE">Upgrading
	    Section in 9.0-RELEASE Release Notes</link> carefully
	  before submitting a problem report and/or posting a question
	  to the &os; mailing lists.</emphasis></para>
    </sect2>
  </sect1>
</article>