The FreeBSD Project $FreeBSD$ 2000 2001 2002 2003 The FreeBSD Documentation Project The release notes for &os; &release.current; contain a summary of This document lists applicable security advisories that were issued since the last release, as well as significant changes to the &os; kernel and userland. Some brief remarks on upgrading are also presented. This document contains the release notes for &os; &release.current; on the &arch.print; hardware platform. It describes recently added, changed, or deleted features of &os;. It also provides some notes on upgrading from previous versions of &os;. The &release.type; distribution to which these release notes apply represents a point along the &release.branch; development branch between &release.prev; and the future &release.next;. Some pre-built, binary &release.type; distributions along this branch can be found at . ]]> This distribution of &os; &release.current; is a &release.type; distribution. It can be found at or any of its mirrors. More information on obtaining this (or other) &release.type; distributions of &os; can be found in the Obtaining FreeBSD appendix to the FreeBSD Handbook. ]]> Users who are new to the &release.branch; series of &os; &release.type;s should also read the Early Adopters Guide to &os; &release.current;. This document can generally be found in the same location as the release notes (either as a part of a &os; distribution or on the &os; Web site). It contains important information regarding the advantages and disadvantages of using &os; &release.current;, as opposed to releases based on the &os; 4-STABLE development branch. All users are encouraged to consult the release errata before installing &os;. The errata document is updated with late-breaking information discovered late in the release cycle or after the release. Typically, it contains information on known bugs, security advisories, and corrections to documentation. An up-to-date copy of the errata for &os; &release.current; can be found on the &os; Web site. This section describes Typical release note items document recent security advisories issued after &release.prev.historic;, new drivers or hardware support, new commands or options, major bug fixes, or contributed software upgrades. They may also list changes to major ports/packages or release engineering practices. Clearly the release notes cannot list every single change made to &os; between releases; this document focuses primarily on security advisories, user-visible changes, and major architectural improvements. A kernel software watchdog facility has been implemented. For more information, see &man.watchdog.4; and &man.watchdogd.8;. PCI interrupts are always routed on i386 UP machines, which may improve the usability of some PCI devices (particularly on laptops). An integer overflow that could cause kernel panics on PAE machines of certain large memory sizes has been corrected. A bug that even when no AT keyboard is connected, &man.atkbd.4; registers an AT keyboard during console initialization has been fixed. kbdcontrol -k /dev/kbd1 is no longer needed when only a USB keyboard is connected. &merged; The &man.safe.4; driver has been added to support SafeNet 1141, 1741-based crypto accelerators. &merged; The public key support is not implemented. The new &man.ath.4; and &man.ath.hal.4; drivers provide support for 802.11a/b/g devices based on the AR5210, AR5211, and AR5212 chips. &man.bge.4; now supports Broadcom 5705 based Gigabit Ethernet NICs. &merged; A bug in the &man.bge.4; driver that prevented it from working correctly at 10 Mbps has been fixed. The &man.harp.4; driver has been added. This is a pseudo physical interface driver for HARP, which attaches to all netgraph ATM interface in the system and presents a physical interface to the HARP stack for each of these interfaces. The &man.hatm.4; driver has been added to support Fore/Marconi HE155 and HE622 ATM cards. The &man.patm.4; driver has been added to support IDT77252 based ATM interfaces. The suspend/resume support for the &man.wi.4; driver now works correctly when the device is configured down. &merged; The 802.11 support layer has been rewritten to allow for future growth and new features. &man.ipfw.4; rules now support comma-separated address lists (like 1.2.3.4, 5.6.7.8/30, 9.10.11.12/22), and allows spaces after commas to make lists of addresses more readable. &merged; &man.ipfw.4; rules now support C++-style comment. The comment is stored together with the rule and appears using &man.ipfw.8; show command. &merged; &man.ipfw.8; now allows to modify &man.ipfw.4; rules in set 31, which was read-only and used for the default rules. They can be deleted by ipfw delete set 31 command but are not deleted by ipfw flush command. So this implements a flexible form of persistent rules. More details can be found in &man.ipfw.8;. &merged; To reduce information leakage, IPv4 packets no longer have a ip_id field set unless fragmentation is being done. Various &man.geom.4; modules can now be loaded as kernel modules, namely: geom_apple, geom_bde, geom_bsd, geom_gpt, geom_mbr, geom_pc98, geom_sunlabel, geom_vol_ffs. A GEOM_FOX module has been added to detect and select between multiple redundant paths to the same device. The &man.matcd.4; driver, which supports the Matsushita CR-562 and CR-563 CD drives, has returned. Some off-by-one errors in the smbfs that prevented it from working correctly with 15-character NetBIOS names have been fixed. &man.arp.8; now supports a -i option to limit the scope of the current operation to the ARP entries on a particular interface. This option applies to the display operations only. It should be useful on routers with numerous network interfaces. &man.chroot.8; now allows the optional setting of a user, primary group, or group list to use inside the chroot environment via the -u, -g, and -G options respectively. &merged; The dev_db utility is unnecessary due to the mandatory presence of devfs, and has been removed. &man.ipfw.8; list and show command now support ranges of rule numbers. &merged; &man.ipfw.8; now supports a -n flag to test the syntax of commands without actually changing anything. &merged; The libcipher DES cryptography library has been removed. All of its functionality is provided by the libcrypto library, and all base systems programs that used libcipher have been converted to use libcrypto instead. The libthr 1:1 threading library is now built by default. The &man.locale.1; utility has been re-implemented and is now POSIX-compliant. The &man.mount.8; utility now supports to display the filesystem ID for each file system in addition to the normal information when a -v flag is specified, and &man.umount.8; utility now accepts the filesystem ID as well as the usual device and path names. This allows to unambiguously specify which file system is to be unmounted even when two or more file systems share the same device and mount point names. The &man.mount.nwfs.8;, &man.mount.portalfs.8;, and &man.mount.smbfs.8; utilities have been moved from /sbin to /usr/sbin. The &man.pam.guest.8; PAM module has been added to allow guest logins. It replaces the pam_ftp(8) module. &man.ps.1; and &man.top.1; now support a -H flag to display all kernel-visible threads in each process. A bug that &man.rarpd.8; does not recognize removable Ethernet NICs has been fixed. A number of utilities available in /bin and /sbin are now available as a statically-linked crunched binary that lives in /rescue. This functionality is similar to the /stand directory installed by &man.sysinstall.8;, but it /rescue includes more functionality and is updated by as part of buildworld/installworld operations. More details can be found in &man.rescue.8;. The ACPI-CA code has been updated from the 20030228 snapshot to the 20030619 snapshot. BIND has been updated from 8.3.4 to 8.3.6. GCC has been updated from 3.2.2 to 3.3.1-prerelease (a 11 July 2003 snapshot). lukemftp has been updated from 1.6beta2 to a 30 June 2003 snapshot from NetBSD. OpenPAM has been updated from the Dianthus release to the Dogwood release. texinfo has been updated from 4.5 to 4.6. &merged; If GNU_CONFIGURE is defined, all instances of config.guess and config.sub found under WRKDIR are replaced with the master versions from PORTSDIR/Template. This allows old ports (which contain old versions of these scripts) to build on newer architectures like ia64 and amd64. Users with existing &os; systems are highly encouraged to read the Early Adopter's Guide to &os; &release.current;. This document generally has the filename EARLY.TXT on the distribution media, or any other place that the release notes can be found. It offers some notes on upgrading, but more importantly, also discusses some of the relative merits of upgrading to &os; 5.X versus running &os; 4.X. Upgrading &os; should, of course, only be attempted after backing up all data and configuration files.