From nobody Tue Feb 27 00:09:21 2024 X-Original-To: dev-commits-doc-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4TkHsZ0xXbz5Bysj for ; Tue, 27 Feb 2024 00:09:22 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4TkHsZ0DtZz4dR6; Tue, 27 Feb 2024 00:09:22 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1708992562; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=y3H9MC1RiNU/DjRpRQKZNBIz+H5016lI0yIRxFjC8jA=; b=qxj/b3C6GyHfKatCG4RX+JtDKGNvbOtBWkbJSvOJvIoUGvJe/d1tq+Fod42fLzW0hypq62 IauvW/75d+y5EuFW/gGoYoqd7ZAMUIk1cfuNbwIKAhkIpdfmBWo5vp1yb3lLKOi+HA3y3F 0feWX+/Xl7M3cEaC7McTqGyX1HTJbvUeFs9RUwNdqYO0cgEa36RR6hpLX0zLfgmuZibkw/ cBtUhOY1o2MbDZCOkBquh25nB1aJDYywdtHBLSc0cobwIw3Ye0bxeAtCAPbBUPr8rDF/dg jxn+LhyrGgt8hA6Tknhq0L8Twh7DYKtRVOwTrjJ4/tKPYb3Romw95+LSvR4C9w== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1708992562; a=rsa-sha256; cv=none; b=IYDHLElbW42Db2vJ3sYO2dyKVIegM5RF1ztttx+KEZWkxS2llkA8ZXMotkzAz9I1pB4AIu VzJSq8v6vCWpFWWn9s6lOKxUqstlpNs8giMYW4INwxGpB/NGLfnpBc5J8grdDqYl+Jl4qN Takdr433kW1RAqZZwjulkggli4ppGozg5nNqW2PDO1p8EZCSCYYdHY/1VLHM68SsEAdfjx b8I+PH2uXBtEPtfXlS4WaZNTinNAJjT/CvJe2P+hPVyM+8aANiMnnlrfsHyCGiJy5S/d9R 9hizyCQV2mOar5Eru/5iZSKOED4bUXz5DFYP9eokrj59v8BbBDlXhUdG/+m2mQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1708992562; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=y3H9MC1RiNU/DjRpRQKZNBIz+H5016lI0yIRxFjC8jA=; b=oDEaMxj4aJbXES6jSbRqC74K2+rZeTnCnIxdCzOqL1pA45SYXMEJ3yhoa2yQBnfSN9qetd wY/oCMuBARp8JRDBATumN88Z+oJWKoVRZCI2CvQBWB/O8RWt6zTbB1RoLhBJ5kek6X2FLv YjdQBJ3S/OvO0wG+MUx4nHt0OIwmn+dF+Cb3FsBt0iNHsGUTuIZC/fkmsmfzO6EW6/d9+F pBJ3wrQndYZjebrrs0v5LBvGM4LmLHmIXI6idn9vHY+1vDcKBTEL4Lxnmlu2pLRetyFseP BvWSeWLhHTakVJabilYd6K73FxfTtw8Mwh1OGx+dxBE6XCrCmNXV1nDs8/qcIg== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4TkHsY6Px8zpvn; Tue, 27 Feb 2024 00:09:21 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.17.1/8.17.1) with ESMTP id 41R09Lsa099189; Tue, 27 Feb 2024 00:09:21 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.17.1/8.17.1/Submit) id 41R09LQT099186; Tue, 27 Feb 2024 00:09:21 GMT (envelope-from git) Date: Tue, 27 Feb 2024 00:09:21 GMT Message-Id: <202402270009.41R09LQT099186@gitrepo.freebsd.org> To: doc-committers@FreeBSD.org, dev-commits-doc-all@FreeBSD.org From: Mike Karels Subject: git: a5ba1c9303 - main - 13.3 relnotes: additions and corrections List-Id: Commit messages for all branches of the doc repository List-Archive: https://lists.freebsd.org/archives/dev-commits-doc-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-doc-all@freebsd.org X-BeenThere: dev-commits-doc-all@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: karels X-Git-Repository: doc X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: a5ba1c9303f21fa81a0e8754399b571f66c93560 Auto-Submitted: auto-generated The branch main has been updated by karels: URL: https://cgit.FreeBSD.org/doc/commit/?id=a5ba1c9303f21fa81a0e8754399b571f66c93560 commit a5ba1c9303f21fa81a0e8754399b571f66c93560 Author: Mike Karels AuthorDate: 2024-02-27 00:09:04 +0000 Commit: Mike Karels CommitDate: 2024-02-27 00:09:04 +0000 13.3 relnotes: additions and corrections Additions from a number of people; more contrib upgrades; touchups/corrections. Differential Revision: https://reviews.freebsd.org/D44054 --- website/content/en/releases/13.3R/relnotes.adoc | 68 +++++++++++++++++++++++-- 1 file changed, 65 insertions(+), 3 deletions(-) diff --git a/website/content/en/releases/13.3R/relnotes.adoc b/website/content/en/releases/13.3R/relnotes.adoc index ced30aebaa..b68002c8ad 100644 --- a/website/content/en/releases/13.3R/relnotes.adoc +++ b/website/content/en/releases/13.3R/relnotes.adoc @@ -128,6 +128,16 @@ the options passed to man:diff[1] for the security scripts are controlled by `security_status_diff_flags`. gitref:4c14a3a6aebe[repository=src] gitref:6d9195b5f763[repository=src] +The default location for downloading leapsecond information has been updated to use the canonical source, as the previous location was no longer supported. +gitref:d19b59cfe594[repository=src] + +The man:powerd[8] daemon is now enabled by default in [.filename]#/etc/rc.conf# on the arm64 `RPI` image for Raspberry Pi systems, allowing the system to run at full speed as needed. +Users with non-default turbo settings may want to disable it. +gitref:e889b5a892b6[repository=src] + +The umask for a service may now be specified in man:rc.conf[5] using the variable _umask, where the service is named . +gitref:2d6a03dd43c7[repository=src] + [[userland-programs]] === Userland Application Changes @@ -138,18 +148,26 @@ gitref:585762c3733f[repository=src] The man:objdump[1] utility from LLVM is now available. Some LLVM objdump options have a different output format than GNU objdump; man:readelf[1] is available for inspecting ELF files, and GNU objdump is available from the [.filename]#devel/binutils# port or package. +The man:tftpd[8] server can be configured to allow writes to files in a chrooted environment that are not world-writable using the new `-S` option. +gitref:b71dde1aeba2[repository=src] [[userland-contrib]] === Contributed Software +`expat` has been upgaded to version 2.6.0. + +Several Heimdal security fixes have been applied to mitigate vulnerabilities in the Kerberos Key Distribution Center. + The `libfido2` authentication token library has been updated to version 1.13.0. gitref:b27bad1e0373[repository=src] gitref:079a1c2059e7[repository=src] gitref:d79e0d1735e3[repository=src] (Sponsored by The FreeBSD Foundation) `LLVM` and the `clang` compiler have been upgraded to version 17.0.6. +`nvi` (man:vi[1]) has been upgraded to version 2.2.1. + `sendmail` has been upgraded to version 8.18.1. This version enforces stricter RFC compliance by default, especially with respect to line endings. -This may cause issues with receiving messages from non-compliant MTAs; please see the first 8.18.1 release note in link:https://ftp.sendmail.org/RELEASE_NOTES[https://ftp.sendmail.org/RELEASE_NOTES] for mitigations. +This may cause issues with receiving messages from non-compliant MTAs; please see the first 8.18.1 release note in link:https://ftp.sendmail.org/RELEASE_NOTES[] for mitigations. gitref:b36ddb27b3b9[repository=src] `OpenSSH` has been updated to version 9.6p1, including a number of security fixes. @@ -160,6 +178,11 @@ gitref:f26eafdfafb0[repository=src] gitref:221a6bc397ad[repository=src] gitref:2 `tzdata` has been upgraded to version 2024a. +`unbound` has been upgraded to version 1.19.1, including security fixes. +gitref:c6edb21e3763[repository=src] + +`xz` has been upgraded to version 5.4.5. + The man:zlib[3] library has been updated to version 1.3.1. gitref:f2de7ba78a49[repository=src] gitref:05e3998add1c[repository=src] @@ -188,6 +211,18 @@ This section covers changes and additions to devices and device drivers since {r Multiple PCI MCFG regions are now supported on x86 systems, enabling support for PCI config access for domains (segments) other than 0. gitref:0fb0306a89ad[repository=src] +A problem with the `graid` implementation of Promise RAID1 created with 4 or more disks has been fixed. +The array worked only until reboot. +gitref:94ceefc2f2f5[repository=src] + +The man:iwlwifi[4] driver for Intel wireless interfaces has been updated, supporting chipsets up to B200. +(Sponsored by The FreeBSD Foundation) + +The man:rtw88[4] driver for Realtek wireless PCI interfaces has been updated. + +There have been many stability fixes to native and LinuxKPI-based wireless drivers. +(Sponsored by The FreeBSD Foundation) + The man:smsc[4] driver for USB Ethernet adapters will now obtain the MAC address from bootargs on Raspberry Pi systems that pass it, and will otherwise fall back to use of man:ether_gen_addr[9] to generate a stable MAC address if none is provided by the hardware. gitref:3d96ee7c7dcc[repository=src] @@ -196,6 +231,12 @@ gitref:3d96ee7c7dcc[repository=src] This section covers changes and additions to file systems and other storage subsystems, both local and networked. +[[storage-general]] +=== General Storage + +In the course of debugging and resolving a problem with vnode recycling in the generic file system code, sysctls for vnode-related statistics have been grouped under `vfs.vnode` for greater visibility. +gitref:77a8bd148796[repository=src] + [[storage-nfs]] === NFS Changes @@ -221,7 +262,6 @@ gitref:7005cd440405[repository=src] gitref:e6c1e181ba7f[repository=src] gitref:d The man:zfsd[8] daemon will now fault disks that generate too many I/O delay events. gitref:e2ce586899ff[repository=src] (Sponsored by Axcient) - [[boot]] == Boot Loader Changes @@ -238,6 +278,15 @@ This section describes changes that affect networking in FreeBSD. [[network-general]] === General Network +The logging priority of syslog messages due to overflow of a socket listen queue can now be set using the sysctl `kern.ipc.sooverprio`. +The default is 7, corresponding to LOG_DEBUG. +A value of -1 suppresses logging. +See man:listen[2]. +gitref:773c91ccc892[repository=src] + +The netgraph man:ng_ipfw[4] module no longer truncates cookies to 16 bits, allowing a full 32 bits. +gitref:0b9242dea68c[repository=src] + Support for IPv6 RFC 4620 nodeinfo is now disabled by default. gitref:5c4e8a631097[repository=src] (Sponsored by The FreeBSD Foundation) @@ -245,9 +294,22 @@ pf filter rules can be optionally enabled for packets delivered locally to enable pf rdr rules for connections initiated from the host. This can change the behavior of rules which match packets delivered to `lo0`. To enable this feature, use the commands `sysctl net.pf.filter_local=1; service pf restart`. -When enabled, it is best to ensure that packets delivered locally are not filtered, e.g. by adding a "set skip on lo" rule. +When enabled, it is best to ensure that packets delivered locally are not filtered, e.g. by adding a `set skip on lo` rule. gitref:6dfb2c2dce0f[repository=src] +[[hardware]] +== Hardware Support + +This section covers general hardware support for physical machines, as well as hardware changes and updates that do not fit in other sections of this document. + +[[hardware-arch]] +=== Hardware Architecture Support + +The BeagleBone Black (armv7) is no longer supported; it does not work with the current boot files (DTB). + +[[hardware-virtualization]] +=== Virtualization Support + [[future-releases]] == General Notes Regarding Future FreeBSD Releases