BSDSec

deadsimple BSD Security Advisories and Announcements

FreeBSD 11.1-RELEASE Now Available

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

                       FreeBSD 11.1-RELEASE Announcement

   The FreeBSD Release Engineering Team is pleased to announce the
   availability of FreeBSD 11.1-RELEASE. This is the second release of the
   stable/11 branch.

   Some of the highlights:

     * Clang, LLVM, LLD, LLDB, and libc++ have been updated to version
       4.0.0.

     * Many third-party (contributed) software updates, such as the Elf Tool
       Chain, ACPICA, libarchive(3), ntpd(8), unbound(8), and more.

     * Support for blacklistd(8) has been added to OpenSSH.

     * The zfsbootcfg(8) utility has been added, providing one-time
       boot.config(5)-style options for zfsboot(8).

     * The efivar(8) utility has been added, providing an interface to
       manage UEFI variables.

     * Support for Microsoft(R) Hyper-V(TM) Generation 2 virtual machines
       has been added.

     * The ena(4) driver has been added, providing support for "next
       generation" Enhanced Networking on the Amazon(R) EC2(TM) platform.

     * The NFS client now supports the Amazon(R) Elastic File System(TM)
       (EFS).

     * The EFI loader can now access remote files via TFTP in addition to
       NFS as a runtime configuration option.

     * ZFS now stores compressed data in cache, improving cache hit rates
       and performance.

     * Several updates to provide build reproducibility.

   For a complete list of new features and known problems, please see the
   online release notes and errata list, available at:

     * https://www.FreeBSD.org/releases/11.1R/relnotes.html

     * https://www.FreeBSD.org/releases/11.1R/errata.html

   For more information about FreeBSD release engineering activities, please
   see:

     * https://www.FreeBSD.org/releng/

Availability

   FreeBSD 11.1-RELEASE is now available for the amd64, i386, powerpc,
   powerpc64, sparc64, armv6, and aarch64 architectures.

   FreeBSD 11.1-RELEASE can be installed from bootable ISO images or over
   the network. Some architectures also support installing from a USB memory
   stick. The required files can be downloaded as described in the section
   below.

   SHA512 and SHA256 hashes for the release ISO, memory stick, and SD card
   images are included at the bottom of this message.

   PGP-signed checksums for the release images are also available at:

     * https://www.FreeBSD.org/releases/11.1R/signatures.html

   A PGP-signed version of this announcement is available at:

     * https://www.FreeBSD.org/releases/11.1R/announce.asc

   Note for those upgrading from 11.1-RC2 in VirtualBox(TM):
   If system panics were experienced when upgrading from 11.1-RC1 to
   11.1-RC2, and the emulators/virtualbox-ose-additions{,-nox11} port was
   built locally as a resolution, the port will either need to be rebuilt
   when upgrading from 11.1-RC2 to 11.1-RELEASE, or reinstall the package
   from the pkg(8) mirrors using either:

   # pkg install -f virtualbox-ose-additions

   or:

   # pkg install -f virtualbox-ose-additions-nox11

   To ensure the system does not panic after rebooting into the updated
   kernel, it is recommended to disable the vboxguest service in rc.conf(5)
   prior to rebooting the system if possible, or use pkg(8) to forcefully
   reinstall the package.

   Systems being upgraded from 11.1-RC1 and earlier and 11.1-RC3 to
   11.1-RELEASE should be unaffected.

   The purpose of the images provided as part of the release are as follows:

   dvd1

           This contains everything necessary to install the base FreeBSD
           operating system, the documentation, debugging distribution sets,
           and a small set of pre-built packages aimed at getting a
           graphical workstation up and running. It also supports booting
           into a "livefs" based rescue mode. This should be all you need if
           you can burn and use DVD-sized media.

   disc1

           This contains the base FreeBSD operating system. It also supports
           booting into a "livefs" based rescue mode. There are no pre-built
           packages.

   bootonly

           This supports booting a machine using the CDROM drive but does
           not contain the installation distribution sets for installing
           FreeBSD from the CD itself. You would need to perform a network
           based install (e.g., from an HTTP or FTP server) after booting
           from the CD.

   memstick

           This can be written to an USB memory stick (flash drive) and used
           to do an install on machines capable of booting off USB drives.
           It also supports booting into a "livefs" based rescue mode. There
           are no pre-built packages.

           As one example of how to use the memstick image, assuming the USB
           drive appears as /dev/da0 on your machine something like this
           should work:

           # dd if=FreeBSD-11.1-RELEASE-amd64-memstick.img \
             of=/dev/da0 bs=1m conv=sync

           Be careful to make sure you get the target (of=) correct.

   mini-memstick

           This can be written to an USB memory stick (flash drive) and used
           to boot a machine, but does not contain the installation
           distribution sets on the medium itself, similar to the bootonly
           image. It also supports booting into a "livefs" based rescue
           mode. There are no pre-built packages.

           As one example of how to use the mini-memstick image, assuming
           the USB drive appears as /dev/da0 on your machine something like
           this should work:

           # dd if=FreeBSD-11.1-RELEASE-amd64-mini-memstick.img \
             of=/dev/da0 bs=1m conv=sync

           Be careful to make sure you get the target (of=) correct.

   FreeBSD/arm SD card images

           These can be written to an SD card and used to boot the supported
           arm system. The SD card image contains the full FreeBSD
           installation, and can be installed onto SD cards as small as
           512Mb.

           For convenience for those without console access to the system, a
           freebsd user with a password of freebsd is available by default
           for ssh(1) access. Additionally, the root user password is set to
           root, which it is strongly recommended to change the password for
           both users after gaining access to the system.

           To write the FreeBSD/arm image to an SD card, use the dd(1)
           utility, replacing KERNEL with the appropriate kernel
           configuration name for the system.

           # dd if=FreeBSD-11.1-RELEASE-arm-armv6-KERNEL.img \
             of=/dev/da0 bs=1m conv=sync

           Be careful to make sure you get the target (of=) correct.

   FreeBSD 11.1-RELEASE can also be purchased on CD-ROM or DVD from several
   vendors. One of the vendors that will be offering FreeBSD 11.1-based
   products is:

     * FreeBSD Mall, Inc. https://www.freebsdmall.com

   Pre-installed virtual machine images are also available for the amd64
   (x86_64), i386 (x86_32), and AArch64 (arm64) architectures in QCOW2, VHD,
   and VMDK disk image formats, as well as raw (unformatted) images.

   FreeBSD 11.1-RELEASE amd64 is also available on these cloud hosting
   platforms:

     * Amazon(R) EC2(TM):
       AMIs are available in the following regions:

         ap-south-1 region: ami-8a760ee5
         eu-west-2 region: ami-f2425396
         eu-west-1 region: ami-5302ec2a
         ap-northeast-2 region: ami-f575ab9b
         ap-northeast-1 region: ami-0a50b66c
         sa-east-1 region: ami-9ad8acf6
         ca-central-1 region: ami-622e9106
         ap-southeast-1 region: ami-6d75e50e
         ap-southeast-2 region: ami-bda2bede
         eu-central-1 region: ami-7588251a
         us-east-1 region: ami-70504266
         us-east-2 region: ami-0d725268
         us-west-1 region: ami-8b0128eb
         us-west-2 region: ami-dda7bea4

       AMIs will also available in the Amazon(R) Marketplace once they have
       completed third-party specific validation at:
       https://aws.amazon.com/marketplace/pp/B01LWSWRED/

     * Google(R) Compute Engine(TM):
       Instances can be deployed using the gcloud utility:

           % gcloud compute instances create INSTANCE \
             --image freebsd-11-1-release-amd64 \
             --image-project=freebsd-org-cloud-dev
           % gcloud compute ssh INSTANCE

       Replace INSTANCE with the name of the Google Compute Engine instance.

     * Hashicorp/Atlas(R) Vagrant(TM):
       Instances can be deployed using the vagrant utility:

           % vagrant init freebsd/FreeBSD-11.1-RELEASE
           % vagrant up

     * Microsoft(R) Azure(TM):
       FreeBSD virtual machine images will be available once they have
       completed third-party specific validation at:
       https://azuremarketplace.microsoft.com/marketplace/apps/Microsoft.FreeBSD111?tab=Overview

Download

   FreeBSD 11.1-RELEASE may be downloaded via https from the following site:

     * https://download.freebsd.org/ftp/releases/ISO-IMAGES/11.1/

   FreeBSD 11.1-RELEASE virtual machine images may be downloaded