From owner-svn-doc-head@FreeBSD.ORG Sun Dec 23 22:16:39 2012 Return-Path: Delivered-To: svn-doc-head@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id BF77CD94; Sun, 23 Dec 2012 22:16:39 +0000 (UTC) (envelope-from hrs@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) by mx1.freebsd.org (Postfix) with ESMTP id A0BC18FC0A; Sun, 23 Dec 2012 22:16:39 +0000 (UTC) Received: from svn.freebsd.org (localhost [127.0.0.1]) by svn.freebsd.org (8.14.5/8.14.5) with ESMTP id qBNMGdTU078011; Sun, 23 Dec 2012 22:16:39 GMT (envelope-from hrs@svn.freebsd.org) Received: (from hrs@localhost) by svn.freebsd.org (8.14.5/8.14.5/Submit) id qBNMGde3078009; Sun, 23 Dec 2012 22:16:39 GMT (envelope-from hrs@svn.freebsd.org) Message-Id: <201212232216.qBNMGde3078009@svn.freebsd.org> From: Hiroki Sato Date: Sun, 23 Dec 2012 22:16:39 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r40459 - head/en_US.ISO8859-1/htdocs/releases/9.1R X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-head@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for the doc tree for head List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 23 Dec 2012 22:16:39 -0000 Author: hrs Date: Sun Dec 23 22:16:38 2012 New Revision: 40459 URL: http://svnweb.freebsd.org/changeset/doc/40459 Log: Add 9.1R release notes. Added: head/en_US.ISO8859-1/htdocs/releases/9.1R/relnotes-detailed.html (contents, props changed) Modified: head/en_US.ISO8859-1/htdocs/releases/9.1R/Makefile Modified: head/en_US.ISO8859-1/htdocs/releases/9.1R/Makefile ============================================================================== --- head/en_US.ISO8859-1/htdocs/releases/9.1R/Makefile Sun Dec 23 22:12:41 2012 (r40458) +++ head/en_US.ISO8859-1/htdocs/releases/9.1R/Makefile Sun Dec 23 22:16:38 2012 (r40459) @@ -13,6 +13,7 @@ DATA= docbook.css \ errata.html \ hardware.html \ readme.html \ + relnotes-detailed.html \ installation.html .include "${DOC_PREFIX}/share/mk/web.site.mk" Added: head/en_US.ISO8859-1/htdocs/releases/9.1R/relnotes-detailed.html ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/en_US.ISO8859-1/htdocs/releases/9.1R/relnotes-detailed.html Sun Dec 23 22:16:38 2012 (r40459) @@ -0,0 +1,1992 @@ + + + + +FreeBSD 9.1-RELEASE Release Notes + + + + + +
+
+

FreeBSD 9.1-RELEASE Release Notes

+ +

The FreeBSD Project

+ + + +

$FreeBSD: stable/9/release/doc/en_US.ISO8859-1/relnotes/article.xml +244641 2012-12-23 22:13:53Z hrs $
+

+ +
+

FreeBSD is a registered trademark of the FreeBSD Foundation.

+ +

IBM, AIX, EtherJet, Netfinity, OS/2, PowerPC, PS/2, S/390, and ThinkPad are trademarks +of International Business Machines Corporation in the United States, other countries, or +both.

+ +

IEEE, POSIX, and 802 are registered trademarks of Institute of Electrical and +Electronics Engineers, Inc. in the United States.

+ +

Intel, Celeron, EtherExpress, i386, i486, Itanium, Pentium, and Xeon are trademarks or +registered trademarks of Intel Corporation or its subsidiaries in the United States and +other countries.

+ +

SPARC, SPARC64, SPARCengine, and UltraSPARC are trademarks of SPARC International, Inc +in the United States and other countries. SPARC International, Inc owns all of the SPARC +trademarks and under licensing agreements allows the proper use of these trademarks by +its members.

+ +

Many of the designations used by manufacturers and sellers to distinguish their +products are claimed as trademarks. Where those designations appear in this document, and +the FreeBSD Project was aware of the trademark claim, the designations have been followed +by the “™” or the “®” symbol.

+
+ +
+
+

The release notes for FreeBSD 9.1-RELEASE contain a summary of the changes made +to the FreeBSD base system on the 9.1-STABLE development line. This document +lists applicable security advisories that were issued since the last release, as +well as significant changes to the FreeBSD kernel and userland. Some brief +remarks on upgrading are also presented.

+
+
+ +
+
+ + + +
+

1 Introduction

+ +

This document contains the release notes for FreeBSD 9.1-RELEASE. It describes +recently added, changed, or deleted features of FreeBSD. It also provides some notes on +upgrading from previous versions of FreeBSD.

+ +

This distribution of FreeBSD 9.1-RELEASE is a release distribution. It can be found at +http://www.FreeBSD.org/releases/ or any of its mirrors. More +information on obtaining this (or other) release distributions of FreeBSD can be found in +the “Obtaining FreeBSD” appendix to the FreeBSD +Handbook.

+ +

All users are encouraged to consult the release errata before installing FreeBSD. The +errata document is updated with “late-breaking” information discovered late +in the release cycle or after the release. Typically, it contains information on known +bugs, security advisories, and corrections to documentation. An up-to-date copy of the +errata for FreeBSD 9.1-RELEASE can be found on the FreeBSD Web site.

+
+ +
+
+

2 What's New

+ +

This section describes the most user-visible new or changed features in FreeBSD since +9.0-RELEASE.

+ +

Typical release note items document recent security advisories issued after +9.0-RELEASE, new drivers or hardware support, new commands or options, major bug fixes, +or contributed software upgrades. They may also list changes to major ports/packages or +release engineering practices. Clearly the release notes cannot list every single change +made to FreeBSD between releases; this document focuses primarily on security advisories, +user-visible changes, and major architectural improvements.

+ +
+
+

2.1 Security Advisories

+ +

Problems described in the following security advisories have been fixed. For more +information, consult the individual advisories available from http://security.FreeBSD.org/.

+ +
+ ++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
AdvisoryDateTopic
SA-12:01.openssl3 May 2012 +

OpenSSL multiple vulnerabilities

+
SA-12:02.crypt30 May 2012 +

Incorrect crypt() hashing

+
SA-12:03.bind12 June 2012 +

Incorrect handling of zero-length RDATA fields in +named(8)

+
SA-12:04.sysret12 June 2012 +

Privilege escalation when returning from kernel

+
SA-12:05.bind6 August 2012 +

+named(8) DNSSEC +validation Denial of Service

+
SA-12:06.bind22 November 2012 +

Multiple Denial of Service vulnerabilities with +named(8)

+
SA-12:07.hostapd22 November 2012 +

Insufficient message length validation for EAP-TLS messages

+
SA-12:08.linux22 November 2012 +

Linux compatibility layer input validation error

+
+
+
+ +
+
+

2.2 Kernel Changes

+ +

FreeBSD Jail subsystem now supports mounting +devfs(5), +nullfs(5), and +ZFS filesystem inside a jail. New +jail(8) +parameters allow.mount.devfs, allow.mount.nullfs, and allow.mount.zfs to control the per-jail capabilities have +been added. All of them are disabled by default.[r232728]

+ +

A new +loader(8) +tunable kern.eventtimer.activetick has been added. + This tunable is to specify whether each hardclock tick should be run on every +active CPU or only one. Setting it to 0, the number of +interrupts can be reduced on SMP machines. The default value is 1.[r234167]

+ +

The +posix_fadvise(2) +system call has been implemented. This is a function similar to +madvise(2) +except that it operates on a file descriptor instead of a memory region.[r229723]

+ +

The +filemon(4) +pseudo device has been added. This allows a process to collect file operations + data of its children.[r237795]

+ +

The +sysctl(8) +variable kern.stop_scheduler_on_panic is now set to + 1 by default.[r235413]

+ +

[powerpc] FreeBSD/powerpc64 now supports kernel profiling by using +kgmon(8).[r231907]

+ +

The FreeBSD Linux ABI compatiblity layer now supports linux_fadvice64() and linux_fadvice64_64() system call.[r231145]

+ +

The default value of the +loader(8) + tunable hw.memtest.tests is now automatically set +to 0 when FreeBSD is running on a virtual machine.[r230266]

+ +

A new +loader(8) +tunable kern.msgbuf_show_timestamp has been added. + When this is enabled, timestamp is added to each line of the system message +buffer. The default value is 0 (disabled).[r234075]

+ +

The +null(4) and +zero(4) pseudo + device driver now supports non-blocking mode via +fcntl(2) + system call.[r230320]

+ +

The FreeBSD +sched_ule(4) +scheduler has been improved on CPU load balancing of SMT (Simultaneous + MultiThreading) CPUs. It gives 10-15% performance improvement when the number +of threads is lesser than the number of logical CPUs.[r233599]

+ +

[sparc64] PREEMPTION kernel option is now enabled in GENERIC kernel.[r235992]

+ +

A new +sysctl(8) +variable security.bsd.unprivileged_idprio has been + added. This variable controls whether non-root users can set an idle priority +or not. This is disabled by default.[r230039]

+ +

The +splash(4) screen +interface now supports ASCII art in TheDraw + format.[r228445]

+ +
+
+

2.2.1 Boot Loader Changes

+ +

The +boot0cfg(8) +utility now supports configuration of PXE boot via boot0 boot block temporarily on the next boot. The slice +number 6 or a keyword PXE can be +specified to enable PXE boot in the -s option.[r230065]

+ +

The FreeBSD +boot(8) block +now supports /boot/config in addition to /boot.config as the boot block parameter file. When both of +them exist, the former will be used.[r231287]

+ +

The gptboot boot block now reads the backup GPT header +from the last LBA only when the primary GPT header and tables are invalid. This + mitigates interoperability issues with some +geom(4) +providers like MIRROR which use the last LBA for the +metadata.[r234693]

+ +

The zfsboot boot block and zfsloader supports filesystems within a ZFS storage pool. In + zfsloader, ZFS device name format now is zfs:pool/fs and fully qualified file path is zfs:pool/fs:/path/to/file. The zfsboot accepts kernel/loader name in a format pool:fs:path/to/file + or, as before, pool:path/to/file. In the latter case a default +filesystem is used (the pool root or bootfs property). The + zfsboot passes GUIDs of the selected storage pool +and dataset to zfsloader to be used as its defaults.[r237766]

+ +

[sparc64] The FreeBSD/sparc64 now supports booting from ZFS via zfsboot boot +block and zfsloader. For example, the following commands create a mirrored +storage pool rpool consisting of da0a and da0b and configure the +storage pool as the root filesystem:[r236076]

+ +
+# gpart create -s vtoc8 da0
+# gpart add -t freebsd-zfs -s 10g da0
+# gpart add -t freebsd-swap -s 10g da0
+# gpart add -t freebsd-zfs -s 10g da0
+# zpool create rpool mirror da0a da0b
+# zpool set bootfs=rpool rpool
+# zpool export rpool
+# gpart bootcode -p /boot/zfsboot da0
+# sysctl kern.geom.debugflags=0x10
+# dd if=/boot/zfsloader of=/dev/da0a bs=512 oseek=1024 conv=notrunc
+# dd if=/boot/zfsloader of=/dev/da0b bs=512 oseek=1024 conv=notrunc
+# zpool import rpool
+# cp -p /boot/zfs/zpool.cache /rpool/boot/zfs/zpool.cache
+# zfs set mountpoint=/ rpool
+
+
+ +
+
+

2.2.2 Hardware Support

+ +

[powerpc] The +abtn(4) +driver, which supports ADB keyboards found on Apple laptops, has been added.[r230751]

+ +

[amd64] A workaround for Erratum 721 for AMD Processor Family 10h and 12h has +been implemented. Under a highly specific and detailed set of internal timing +conditions, the processor may incorrectly update the stack pointer after a long +series of push and/or near-call instructions, or a long series of pop and/or +near-return instructions.[r233798]

+ +

[powerpc] The atibl(4) driver, which supports backlight control of ATI graphics +chips on PowerBooks and iBooks, has been added.[r232677]

+ +

The +acpi_wmi(4) +driver now supports attaching multiple instances.[r229858]

+ +

[powerpc] The adm1030(4) driver for G4 MDD fan now shows its PWM parameter in +the device +sysctl(8) +variable.[r230290]

+ +

[arm] The cesa(4) driver for Marvell crypto engine and security accelerator has +been added.[r234559]

+ +

[powerpc] The +hwpmc(4) +driver now supports PowerPC G4+ (MPC745x/MPC744x).[r230305]

+ +

[amd64, i386] The +hwpmc(4) +driver now supports Intel Sandy Bridge microarchitecture.[r234046]

+ +

The +hwpmc(4) driver +now supports software events. Simultaneous usage of software PMC and hardware +PMC is allowed.[r236238]

+ +

The pcf8563(4) driver for NXP (Philips) PCF8563 RTC has been added.[r236078]

+ +

[powerpc] FreeBSD/powerpc now supports PWM-controlled fans found on PowerMac SMU +(System Management Unit).[r233471]

+ +

[arm] FreeBSD/arm now supports Atmel SAM9XE family of microcontrollers.[r236081]

+ +

The following +sysctl(8) +variables have been added: kern.proc.env for +environment strings, kern.proc.auxv for ELF auxiliary +vectors from a process stack, kern.proc.groups for +process groups, kern.proc.rlimit for process resource + limits, and kern.proc.ps_strings for ps_strings +location, kern.proc.osrel for osreldate for process +binary.[r230754, r233950]

+ +

The +usb(4) driver +now handles suspend and resume correctly with no need of reloading the kernel +module.[r229100, r229369]

+ +

A bug in the +xhci(4) (USB +3.0) driver has been fixed. It did not work with USB 3.0 hubs.[r230302]

+ +

The +viawd(4) driver, +which supports watchdog timer found in VIA south bridge (VT8251, CX700, +VX800, VX855, VX900), has been added.[r229927]

+ +

The +wbwd(4) driver, +which supports watchdog timer found in Winbond Super I/O chips, has been +added.[r235926]

+ +
+
+
2.2.2.1 Multimedia Support
+ +

The drm2(4) Intel GPU driver, which supports GEM, KMS, and works with new +generations of GPUs such as IronLake, SandyBridge, and IvyBridge, has been +added. The +agp(4) dirver +now supports SandyBridge and IvyBridge CPU northbridges.[r236926, r236927, r239965]

+ +

The +snd_hda(4) +driver has been updated. It now supports HDMI, new volume control, automatic +recording source selection, runtime reconfigureation, more then 4 PCM devices on a +controller, multichannel recording, additional playback/record streams, +higher bandwidth, and more informative device names.[r232798]

+ +

The +snd_hdspe(4) +driver has been added. This supports RME HDSPe AIO and RayDAT sound cards.[r233165]

+ +

GPL-licensed headers in the +snd_emu10kx(4), + +snd_maestro3(4), + and +snd_csa(4) +drivers have been replaced with BSD-licensed one. These drivers are now fully +BSD-licensed and included in GENERIC kernel on +FreeBSD/amd64 and FreeBSD/i386.[r230964, r230985, r231047, r235769]

+
+ +
+
+
2.2.2.2 Network Interface Support
+ +

A bug in ae(4) driver which +could prevent from working under certain conditions has been fixed.[r229520]

+ +

The +axe(4) driver +now supports TX/RX checksum offloading support for ASIX AX88772B +controller.[r229106]

+ +

The +bce(4) driver +has been improved:

+ +
    +
  • +

    Unnecessary link up/down has been eliminated.[r229864]

    +
  • + +
  • +

    A bug has been fixed. It could prevent IPMI from working when the interface +was marked as down.[r236216]

    +
  • + +
  • +

    It now supports remote PHYs, which allow the controller to perform MDIO type +accesses to a remote transceiver by using message pages defined + through MRBE (MultiRate Backplane Ethernet). This is found on +machines such as Dell PowerEdge M610 Blade.[r235818]

    +
  • +
+ +

The +bge(4) and +brgphy(4) driver have been improved:

+ +
    +
  • +

    A bug which could prevent the DMA functionality from working correctly, has +been fixed.[r229350]

    +
  • + +
  • +

    It now works with PCI-X BCM 5704 controller that connected to AMD-8131 PCI-X +bridge.[r233495]

    +
  • + +
  • +

    It now supports BCM 5720 and BCM 5720C PHY, and BCM 57780 1000BASE-T + media interface.[r229357, r229867, r232134]

    +
  • + +
  • +

    It now supports a +loader(8) + tunable dev.bge.N.msi to control the use of MSI. The +default value is 1 (enabled).[r231734]

    +
  • +
+ +

The +cxgbe(4) and + +cxgb(4) driver +has been updated to firmware version 1.5.2.0. This now supports device +configuration via a plain text configration file, IPv6 hardware checksumming, +IPv6 TSO and LRO, loadfw command in the cxgbetool(8) +utility which allows to install a firmware to the card, +sysctl(8) +variables under dev.t4nex.N.misc for various information.[r231093, r237925]

+ +

The dc(4) driver now +supports NVIDIA (ULi) M5261/M5263 PCI FastEthernet controllers, which are +found on ULi M1563 South Bridge and M1689 Bridge.[r229334]

+ +

The et(4) driver +now works on all platfomrs. A bug which could prevent +altq(4) support +from working has been fixed. A new +sysctl(8) +variables under dev.et.N.stats have been added for hardware MAC +statistics.[r229711, r229717, r229720]

+ +

The +ifpnp(4) driver +has been updated to version 2.3.4. It now supports newer i210/i211 +devices.[r238262]

+ +

The +iwn(4) driver +now supports Intel Centrino Wireless-N + WiMAX 6150 and Wireless-N 100/130 +series.[r233838, r235843]

+ +

The +miibus(4) bus +driver now supports device hints hint.miibus.N.phymask for PHY addresses being probed. +This is useful to manually probe PHYs which do not implement basic register set of + IEEE 802.3. Also, the +miibus(4) driver +has been changed to a hinted bus, allowing to add child devices via hints and +to set their attach arguments in addition to automatically-probed PHYs.[r230709]

+ +

The +msk(4) driver +now uses 64-bit DMA addressing on 64-bit platforms.[r229524]

+ +

The +mxge(4) driver +has been updated to firmware version 1.4.55 from Myricom.[r236413]

+ +

The nsphyter(4) driver now supports National DP83849.[r232137]

+ +

The +oce(4) driver, +which supports Emulex OneConnect 10Gbit Ethernet card, has been added.[r231663]

+ +

The +ral(4) driver +now supports Ralink RT2800 and RT3000 chipsets.[r236004]

+ +

The re(4) driver now + supports RTL8411 PCIe Gigabit Ethernet controller. A bug which could prevent +WoL (Wake-on-LAN) from working on RTL8168E has been fixed.[r229529, r231731]

+ +

The +runfw(4) +firmware has been updated to version 0.236.[r234028]

+ +

The +sfxge(4) driver, +which supports 10Gb Ethernet adapters based on Solarflare SFC9000 family +controllers, has been added.[r228100]

+ +

The smcphy(4); driver now supports Seeq Technology 80220 PHY. This is found on +Adaptec AIC-6915 Starfire ethernet controller supported by the sf(4) driver.[r233485]

+ +

The ti(4) driver now + supports +altq(4) +framework, reporting link-state change, and +sysctl(8) +variables under dev.ti.N for the interrupt moderation +parameters.[r229417, r229438]

+ +

A bug in ti(4) driver which +could prevent it from working correctly with PAE +kernel option, has been fixed.[r229441]

+ +

The +vge(4) driver +has been updated to improve its link establishment and link-state +detection.[r229540]

+ +

The vr(4) driver now +enables flow control capability in the PHY drivers.[r229641]

+ +

The +xnb(4) Xen +Paravirtualized Backend Ethernet Driver (netback) has been updated. This is +attached via newbus framework and works properly in both HVM and PVM mode.[r231697]

+
+
+ +
+
+

2.2.3 Network Protocols

+ +

The +if_bridge(4) +pseudo interface now supports reporting link-state change depending on status +of the member interfaces.[r236051]

+ +

The table argument in the +ipfw(4) packet +filter rule syntax now supports IP address, interface name, port number, and jail +ID. The following syntax is valid:[r234597]

+ +
+skipto tablearg ip from any to any via table(42) in
+
+ +

FreeBSD +ip6(4) protocol +stack now has been improved in terms of its performance. Benchmarking can be found +at http://people.freebsd.org/~bz/bench/.

+ +

FreeBSD +ip6(4) protocol +stack now supports multiple FIB.[r232292]

+ +

An IPv6 default route configured via Router Advertisement messages is now +reinstalled correctly when the default route is manually removed and then another + same RA message is received.[r230604]

+ +

A bug which could return an incorrect value of IPV6_MULTICASE_HOPS socket option has been fixed.[r227885]

+ +

A new +sysctl(8) +NET_RT_IFLISTL has been added. This queries the address +list and works on extended and extensible structures if_msghdrl and ifa_msghdrl +without breaking the ABI.[r231768]

+ +

The