FreeBSD The Power to Serve

FreeBSD 13.4-RELEASE Release Notes

Abstract

The release notes for FreeBSD 13.4-RELEASE contain a summary of the changes made to the FreeBSD base system on the 13-STABLE development line. This document lists applicable security advisories that were issued since the last release, as well as significant changes to the FreeBSD kernel and userland. Some brief remarks on upgrading are also presented.

Introduction

This document contains the release notes for FreeBSD 13.4-RELEASE. It describes recently added, changed, or deleted features of FreeBSD. It also provides some notes on upgrading from previous versions of FreeBSD.

The "release" distribution to which these release notes apply represents the latest point along the 13-STABLE development branch since 13-STABLE was created. Information regarding pre-built, binary "release" distributions along this branch can be found at https://www.FreeBSD.org/releases/.

The "release" distribution to which these release notes apply represents a point along the 13-STABLE development branch between 13.3-RELEASE and the future 13.5-RELEASE. Information regarding pre-built, binary "release" distributions along this branch can be found at https://www.FreeBSD.org/releases/.

This distribution of FreeBSD 13.4-RELEASE is a "release" distribution. It can be found at https://www.FreeBSD.org/releases/ or any of its mirrors. More information on obtaining this (or other) "release" distributions of FreeBSD can be found in the Obtaining FreeBSD appendix to the FreeBSD Handbook.

All users are encouraged to consult the release errata before installing FreeBSD. The errata document is updated with "late-breaking" information discovered late in the release cycle or after the release. Typically, it contains information on known bugs, security advisories, and corrections to documentation. An up-to-date copy of the errata for FreeBSD 13.4-RELEASE can be found on the FreeBSD Web site.

This document describes the most user-visible new or changed features in FreeBSD since 13.3-RELEASE. In general, changes described here are unique to the 13-STABLE branch unless specifically marked as MERGED features.

Typical release note items document recent security advisories issued after 13.3-RELEASE, new drivers or hardware support, new commands or options, major bug fixes, or contributed software upgrades. They may also list changes to major ports/packages or release engineering practices. Clearly the release notes cannot list every single change made to FreeBSD between releases; this document focuses primarily on security advisories, user-visible changes, and major architectural improvements.

Upgrading from Previous Releases of FreeBSD

Binary upgrades between RELEASE versions (and snapshots of the various security branches) are supported using the freebsd-update(8) utility. See the release-specific upgrade procedure, FreeBSD 13.4-RELEASE upgrade information, with more details in the FreeBSD handbook binary upgrade procedure. This will update unmodified userland utilities, as well as unmodified GENERIC kernels distributed as a part of an official FreeBSD release. The freebsd-update(8) utility requires that the host being upgraded have Internet connectivity.

Source-based upgrades (those based on recompiling the FreeBSD base system from source code) from previous versions are supported, according to the instructions in /usr/src/UPDATING.

Upgrading FreeBSD should only be attempted after backing up all data and configuration files.

Security and Errata

This section lists the various Security Advisories and Errata Notices since 13.3-RELEASE.

Security Advisories

Advisory Date Topic

FreeBSD-SA-24:03.unbound

28 March 2024

Multiple vulnerabilities in Unbound

FreeBSD-SA-24:04.openssh

01 July 2024

OpenSSH pre-authentication remote code execution

FreeBSD-SA-24:05.pf

07 August 2024

pf incorrectly matches different ICMPv6 states in the state table

FreeBSD-SA-24:06.ktrace

07 August 2024

ktrace(2) fails to detach when executing a setuid binary

FreeBSD-SA-24:07.nfsclient

07 August 2024

NFS client accepts file names containing path separators

FreeBSD-SA-24:08.openssh

07 August 2024

OpenSSH pre-authentication async signal safety issue

FreeBSD-SA-24:09.libnv

04 September 2024

Multiple vulnerabilities in libnv

FreeBSD-SA-24:10.bhyve

04 September 2024

bhyve(8) privileged guest escape via TPM device passthrough

FreeBSD-SA-24:11.ctl

04 September 2024

Multiple issues in ctl(4) CAM Target Layer

FreeBSD-SA-24:12.bhyve

04 September 2024

bhyve(8) privileged guest escape via USB controller

FreeBSD-SA-24:13.openssl

04 September 2024

Possible DoS in X.509 name checks in OpenSSL

FreeBSD-SA-24:14.umtx

04 September 2024

umtx Kernel panic or Use-After-Free

Errata Notices

Errata Date Topic

FreeBSD-EN-24:05.tty

28 March 2024

TTY Kernel panic

FreeBSD-EN-24:06.wireguard

28 March 2024

Insufficient barriers in WireGuard if_wg(4)

FreeBSD-EN-24:07.clang

28 March 2024

Clang crash when certain optimization is enabled

FreeBSD-EN-24:08.kerberos

28 March 2024

Kerberos segfaults when using weak crypto

FreeBSD-EN-24:09.zfs

24 April 2024

High CPU usage by kernel threads related to ZFS

FreeBSD-EN-24:10.zfs

19 June 2024

Kernel memory leak in ZFS

FreeBSD-EN-24:11.ldns

19 June 2024

LDNS uses nameserver commented out in resolv.conf

FreeBSD-EN-24:12.killpg

19 June 2024

Lock order reversal in killpg causing livelock

FreeBSD-EN-24:13.libc++

19 June 2024

Incorrect size passed to heap allocated std::string delete

FreeBSD-EN-24:14.ifconfig

07 August 2024

Incorrect ifconfig netmask assignment

FreeBSD-EN-24:15.calendar

04 September 2024

cron(8) / periodic(8) session login

Userland

This section covers changes and additions to userland applications, contributed software, and system utilities.

Userland Application Changes

libcapsicum has been improved to cache more time zone information. This change reduces the number of calls to tzset(3) and improves performance.

Contributed Software

sqlite3 has been upgraded to 3.46.0.

OpenSSH has been to upgraded to 9.7p1. This release contains mostly bugfixes. It also makes support for the DSA signature algorithm a compile-time option, with plans to disable it upstream later this year and remove support entirely in 2025.

LLVM and the clang compiler have been upgraded to version 18.1.5.

bc has been updated to version 6.7.6.

atf has been updated to 0.22 snapshot 55c21b2c.

libarchive has been updated to 3.7.4.

capsicum-test has been updated to snapshot eab7a83b.

Devices and Drivers

This section covers changes and additions to devices and device drivers since 13.3-RELEASE.

Device Drivers

The irdma(4) driver has been updated.

The ice(4) driver has been updated.

Support for SIM7600G has been added to u3g(4).

There have been many stability fixes to native and LinuxKPI-based wireless drivers. (Sponsored by The FreeBSD Foundation)

Networking

This section describes changes that affect networking in FreeBSD.

Network Protocols

Lots of improvements to the network stack, including performance improvements and bug fixes for the sctp(4) stack. Specifically, support for the SCTP checksum offload feature has been added to the loopback interface.

Hardware Support

This section covers general hardware support for physical machines, hypervisors, and virtualization environments, as well as hardware changes and updates that do not otherwise fit in other sections of this document.

Please see the list of hardware supported by 13.4-RELEASE, as well as the platforms page for the complete list of supported CPU architectures.

Processor Support

Added support for AMD Ryzen 7 "Phoenix" processors (family 0x19, model 0x70-0x7f) to the amdsmn(4) and amdtemp(4) drivers. This enables temperature readings of these CPUs via sysctl. The sensors function identically to those for the "Raphael" processors (model 0x60-0x6f); only the PCI device ID differs.

Documentation

This section covers changes to manual (man(1)) pages and other documentation shipped with the base system.

Man Pages

References to the legacy disklabel utility have been removed in favour of gpart. Future FreeBSD releases will remove this tool entirely.

Ports Collection and Package Infrastructure

This section covers changes to the FreeBSD Ports Collection, package infrastructure, and package maintenance and installation tools.

Packaging Changes

The DVD package set has been modernized.

archivers/unzip has been removed as it is in base now.

emulators/linux_base-c7 has been removed as it is unlikely to be useful without other Linux packages being installed.

ports-mgmt/portmaster has been removed as it has been discouraged in favour of using pkg and binary packages.

x11-drivers/xf86-video-vmware has been removed as it is no longer useful with the current version of xorg-server.

devel/git has been replaced with devel/git@lite as this is sufficient for most purposes.

sysutils/seatd and x11-wm/sway have been added for Wayland support.

General Notes Regarding Future FreeBSD Releases

FreeBSD 15.0 is not expected to include support for 32-bit platforms other than armv7. The armv6, i386, and powerpc platforms are deprecated and will be removed. 64-bit systems will still be able to run older 32-bit binaries.

The FreeBSD Project expects to support armv7 as a Tier 2 architecture in FreeBSD 15.0 and stable/15. However, the Project also anticipates that armv7 may be removed in FreeBSD 16.0. The Project will provide an update on the status of armv7 for both 15.x and 16.x at the time of 15.0 release.

Support for executing 32-bit binaries on 64-bit platforms via the COMPAT_FREEBSD32 option will continue for at least the stable/15 and stable/16 branches. Support for compiling individual 32-bit applications via cc -m32 will also continue for at least the stable/15 branch, which includes suitable headers in /usr/include and libraries in /usr/lib32.

Ports will not include support for deprecated 32-bit platforms for FreeBSD 15.0 and later releases. These future releases will not include binary packages or support for building packages from ports for deprecated 32-bit platforms.

The FreeBSD stable/14 and earlier branches will retain existing 32-bit kernel and world support. Ports will retain existing support for building ports and packages for 32-bit systems on stable/14 and earlier branches as long as those branches are supported by the ports system. However, all 32-bit platforms are Tier-2 or Tier-3, and support for individual ports should be expected to degrade as upstreams deprecate 32-bit platforms.

With the current support schedule, stable/14 will reach end of life (EOL) around 5 years after the release of FreeBSD 14.0-RELEASE. The EOL of stable/14 will mark the end of support for deprecated 32-bit platforms, including source releases, pre-built packages, and support for building applications from ports. With the release of 14.0-RELEASE in November 2023, support for deprecated 32-bit platforms will end in November 2028.

The Project may choose to alter this approach when FreeBSD 15.0 is released by extending some level of support for one or more of the deprecated platforms in 15.0 or later. Any alterations will be driven by community feedback and committed efforts to support these platforms.


Last modified on: September 17, 2024 by Graham Perrin