Kamora selemo sa nts'etsopele, FreeBSD 13.1 e lokollotsoe. Litšoantšo tsa ho kenya li teng bakeng sa meralo ea amd64, i386, powerpc, powerpc64, powerpc64le, powerpcspe, armv6, armv7, aarch64 le riscv64. Ntle le moo, ho lokiselitsoe meaho bakeng sa lits'ebetso tsa virtualization (QCOW2, VHD, VMDK, e tala) le libaka tsa maru tse kang Amazon EC2, Google Compute Engine, le Vagrant.
Khatisong e ncha:
- Mokhanni oa iwlwifi bakeng sa likarete tsa waelese tsa Intel tse tšehetsang li-chip tse ncha le maemo a 802.11ac aa fumaneha. Mokhanni o ipapisitse le Linux-mokhanni le khoutu ho tsoa ho Linux- net80211 subsystems, eo ts'ebetso ea eona ho FreeBSD e netefatsoang ke lera la linuxkpi.
- Ts'ebetso ea sistimi ea faele ea ZFS e ntlafalitsoe ho OpenZFS 2.1 ka ts'ehetso ea theknoloji ea Distributed Spare RAID (dRAID) le ntlafatso ea ts'ebetso ea bohlokoa.
- Sengoloa se secha sa rc, zfkeys, se kentsoe, se ka sebelisoang ho hlakola likarolo tsa ZFS tse kentsoeng ka nako ea ho qala.
- Thepa ea marang-rang e fetotse boitšoaro ba liaterese tsa IPv4 ka zero e latelang (xxx0). Hona joale liaterese tsena li ka sebelisoa e le baamoheli 'me ha li phatlalatsoe ka mokhoa o ikhethileng. Boitšoaro bo fetileng bo ka khutlisoa ho sebelisoa net.inet.ip.broadcast_lowest sysctl.
- Bakeng sa meralo ea 64-bit, sistimi ea motheo e hahang e sebelisa mokhoa oa Position Independent Executable (PIE) e lumelloa ka ho sa feleng. Litlhophiso tsa WITHOUT_PIE li ka sebelisoa ho tima sena.
- E kentse bokhoni ba ho kopa chroot ka ts'ebetso e sa nepahalang ka sete ea lifolakha tsa NO_NEW_PRIVS. Mokhoa ona o lumelloa ho sebelisa security.bsd.unprivileged_chroot sysctl. Khetho ea "-n" e kentsoe ts'ebelisong ea chroot, e behang folakha ea NO_NEW_PRIVS bakeng sa ts'ebetso pele e e arola.
- Sesebelisoa sa ho kenya sa bsdinstall se ntlafalitsoe ka mokhoa oa ho hlophisa karohano ka boiketsetso, o lumellang hore lingoloa tsa karohano li hlophisoe bakeng sa mabitso a fapaneng a li-disk ntle le ho kenella ha mosebelisi. Tšobotsi ena e nolofatsa ho thehoa ha mecha ea ho kenya e iketsang ka botlalo bakeng sa litsamaiso le mechine ea sebele ka li-disk tse fapaneng.
- Ts'ehetso e ntlafalitsoeng ea boot ho litsamaiso tsa UEFI. Bootloader joale e iketsetsa parameter ea copy_staging ho latela bokhoni ba kernel e ntseng e laeloa.
- Mosebetsi o entsoe ho ntlafatsa ts'ebetso ea bootloader, nvme, rtsold, pseudo-random number jenereithara e qalang le ho lekanya nako, e leng se entseng hore nako ea bootloader e fokotsehe.
- Ts'ehetso ea NFS holim'a mocha oa puisano o patiloeng o thehiloeng ho TLS 1.3 e kentsoe. Ts'ebetsong e ncha e sebelisa stack ea TLS e fanoeng ke kernel, e nolofalletsang ho potlakisa lisebelisoa. Ho aha lits'ebetso tsa rpc.tlsclntd le rpc.tlsservd ka moreki oa NFS-over-TLS le ts'ebetsong ea seva ho nolofalitsoe ka mokhoa oa kamehla bakeng sa meralo ea amd64 le arm64.
- Bakeng sa NFSv4.1 le 4.2, khetho ea ho kenya nconnect e se e kentsoe tšebetsong, e leng se etsang qeto ea palo ea li-installed seva Dikgokelo tsa TCP. Kgokelo ya pele e sebedisetswa melaetsa e menyenyane ya RPC, ha e meng e sebedisetswa ho leka-lekanya sephethephethe le data e fetisetswang.
- Bakeng sa seva sa NFS, sysctl vfs.nfsd.srvmaxio e kenyelelitsoe, e lumellang ho fetola boholo ba li-block tsa I / O (ka ho feletseng 128Kb).
- Tšehetso ea hardware e ntlafetseng. Mokhanni oa igc joale o tšehetsa molaoli oa Intel I225 Ethernet. Ts'ehetso ea litsamaiso tse kholo tsa li-Big-endian e ntlafalitsoe. Mokhanni oa mgb o kenyellelitsoe lisebelisoa tsa Microchip LAN7430 PCIe Gigabit Ethernet controller.
- Mokhanni oa leqhoa o sebelisitsoeng bakeng sa balaoli ba Intel E800 Ethernet o nchafalitsoe ho mofuta oa 1.34.2-k, e leng se eketsang tšehetso bakeng sa ho bonahatsa liketsahalo tsa firmware ho log log ea tsamaiso le ho eketsa ts'ebetsong ea pele ea lisebelisoa tsa protocol tsa Data Center Bridging (DCB).
- Litšoantšo tsa Amazon EC2 li lumelloa ho qalisa ho sebelisa UEFI sebakeng sa BIOS ka ho sa feleng.
- The hyve hypervisor e ntlafalitse likarolo tsa eona tsa NVMe drive emulation ho ts'ehetsa litlhaloso tsa NVMe 1.4. Mathata a nang le NVMe iovec nakong ea I/O e matla a rarollotsoe.
- Laeborari ea CAM e fetoletsoe ho sebelisa mehala ea realpath ha e sebetsana le mabitso a sesebelisoa, e lumellang ts'ebeliso ea lihokelo tsa tšoantšetso ho lisebelisoa tse ho camcontrol le lisebelisoa tsa smartctl. Mathata a ho kenya firmware ho lisebelisoa tsa camcontrol a rarollotsoe.
- Sesebelisoa sa svnlite se emisitsoe ho haha mokhoa oa motheo.
- E kentsoe Linux-mefuta ya ditshebeletso tsa ho bala di-checksum (md5sum, sha1sum, jj.) tse kenngwang tshebetsong ka ho bitsa ditshebeletso tsa BSD tse teng (md5, sha1, jj.) ka kgetho ya "-r".
- Sesebelisoa sa mpsutil se ntlafalitsoe ho ts'ehetsa taolo ea NCQ le tlhaiso-leseling ea adaptara.
- Ka kamehla, /etc/defaults/rc.conf e nolofalletsa khetho ea "-i" ha o kopa mekhoa ea rtsol le rtsold, e nang le boikarabelo ba ho romela melaetsa ea ICMPv6 RS (Router Solicitation). Khetho ena e tima tieho e sa reroang pele o romella molaetsa.
- Bakeng sa meralo ea meralo ea riscv64 le riscv64sf, pokello ea laeborari le ASAN (address sanitizer), UBSAN (Undefined Behavior Sanitizer), OpenMP, le OFED (Open Fabrics Enterprise Distribution) e lumelletsoe.
- Lintlha tse rarollotsoeng ka ho tsebahatsa lisebelisoa tsa ho potlakisa lisebelisoa bakeng sa ts'ebetso ea cryptographic e tšehetsoeng ke li-processor tsa ARMv7 le ARM64, e potlakisang ts'ebetso ea li-aes-256-gcm le sha256 algorithms lits'ebetsong tsa ARM.
- Bakeng sa meralo ea powerpc, LLDB debugger, e ntlafalitsoeng ke morero oa LLVM, e kenyelelitsoe ka har'a sephutheloana sa mantlha.
- Laeborari ea OpenSSL e ntlafalitsoe hore e be mofuta oa 1.1.1o 'me ea atolosoa ka ntlafatso ea kopano bakeng sa meaho ea powerpc, powerpc64, le powerpc64le.
- Seva ea SSH le moreki li nchafalitsoe ho OpenSSH 8.8p1, e sitisa tšehetso bakeng sa li-signature tsa dijithale tsa rsa-sha le ho eketsa tšehetso bakeng sa netefatso ea lintlha tse peli ka lisebelisoa tsa FIDO/U2F. Mefuta e mecha ea linotlolo, "ecdsa-sk" le "ed25519-sk," e kentsoe bakeng sa ho sebelisana le lisebelisoa tsa FIDO/U2F. Mefuta ena ea bohlokoa e sebelisa ECDSA le Ed25519 digital signature algorithms, e kopantsoeng le SHA-256 hash.
- Lisebelisoa tse latelang tsa mokha oa boraro tse kenyellelitsoeng tsamaisong ea motheo li ntlafalitsoe: awk 20210215 (ka li-patches tse thibelang tšebeliso ea libaka bakeng sa mekhahlelo le ho ntlafatsa ho lumellana le gawk le mawk), zlib 1.2.12, libarchive 3.6.0.
Source: opennet.ru
