BSDSec

deadsimple BSD Security Advisories and Announcements

FreeBSD 11.0-RELEASE Now Available

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

                       FreeBSD 11.0-RELEASE Announcement

   The FreeBSD Release Engineering Team is pleased to announce the
   availability of FreeBSD 11.0-RELEASE. This is the first release of the
   stable/11 branch.

   Some of the highlights:

     * OpenSSH DSA key generation has been disabled by default. It is
       important to update OpenSSH keys prior to upgrading. Additionally,
       Protocol 1 support has been removed.

     * OpenSSH has been updated to 7.2p2.

     * Wireless support for 802.11n has been added.

     * By default, the ifconfig(8) utility will set the default regulatory
       domain to FCC on wireless interfaces. As a result, newly created
       wireless interfaces with default settings will have less chance to
       violate country-specific regulations.

     * The svnlite(1) utility has been updated to version 1.9.4.

     * The libblacklist(3) library and applications have been ported from
       the NetBSD Project.

     * Support for the AArch64 (arm64) architecture has been added.

     * Native graphics support has been added to the bhyve(8) hypervisor.

     * Broader wireless network driver support has been added.

   For a complete list of new features and known problems, please see the
   online release notes and errata list, available at:

     * https://www.FreeBSD.org/releases/11.0R/relnotes.html

     * https://www.FreeBSD.org/releases/11.0R/errata.html

   For more information about FreeBSD release engineering activities, please
   see:

     * https://www.FreeBSD.org/releng/

Important Notes

   Please note, as a result of the timing between the withdrawn
   FreeBSD 11.0-RELEASE images being available before the official
   announcement and several last-minute issues being discovered, uname(1)
   will display FreeBSD 11.0-RELEASE-p1, as the images were generated from a
   patch-level revision of the releng/11.0 branch.

   Users that have installed FreeBSD 11.0-RELEASE from the images originally
   available on the mirrors or from freebsd-update(8) prior to the rebuild
   of the final release are urged to upgrade their systems to
   FreeBSD 11.0-RELEASE-p1 immediately.

   Users upgrading from system source code should use releng/11.0 revision
   r306420.

   Users upgrading from freebsd-update(8) should follow these instructions
   to update their systems to FreeBSD 11.0-RELEASE-p1:

  Upgrading from FreeBSD 11.0-RELEASE

       # : > /usr/bin/bspatch
       # freebsd-update fetch
       # freebsd-update install


  Upgrading from FreeBSD 10.3-RELEASE and Earlier

       # : > /usr/bin/bspatch
       # freebsd-update upgrade -r 11.0-RELEASE
       # freebsd-update install
       <reboot the system>
       # freebsd-update install
       <rebuild third-party software>
       # freebsd-update install


   EC2(TM) users are urged to read the Errata Notes for FreeBSD 11.0-RELEASE
   regarding an issue discovered very late in the release cycle that may
   cause the system to hang during the boot process when upgrading from
   previous FreeBSD versions. New EC2(TM) installations are not affected,
   but existing installations running earlier releases are advised to wait
   until the issue is resolved in an Errata Notice before upgrading.

Dedication

   The FreeBSD Project dedicates the FreeBSD 11.0-RELEASE to the memory of
   several members of the community:

     * Stefan Farfeleder
     * Juergen Lock
     * Ben Perrault
     * Paul Schenkeveld
     * Volker Werth

   May they rest in peace.

Availability

   FreeBSD 11.0-RELEASE is now available for the amd64, i386, powerpc,
   powerpc64, sparc64, armv6, and aarch64 architectures.

   FreeBSD 11.0-RELEASE can be installed from bootable ISO images or over
   the network. Some architectures also support installing from a USB memory
   stick. The required files can be downloaded via FTP as described in the
   section below. While some of the smaller FTP mirrors may not carry all
   architectures, they will all generally contain the more common ones such
   as amd64 and i386.

   SHA512 and SHA256 hashes for the release ISO, memory stick, and SD card
   images are included at the bottom of this message.

   PGP-signed checksums for the release images are also available at:

     * https://www.FreeBSD.org/releases/11.0R/signatures.html

   A PGP-signed version of this announcement is available at:

     * https://www.FreeBSD.org/releases/11.0R/announce.asc

   The purpose of the images provided as part of the release are as follows:

   dvd1

           This contains everything necessary to install the base FreeBSD
           operating system, the documentation, and a small set of pre-built
           packages aimed at getting a graphical workstation up and running.
           It also supports booting into a "livefs" based rescue mode. This
           should be all you need if you can burn and use DVD-sized media.

   disc1

           This contains the base FreeBSD operating system. It also supports
           booting into a "livefs" based rescue mode. There are no pre-built
           packages.

   bootonly

           This supports booting a machine using the CDROM drive but does
           not contain the installation distribution sets for installing
           FreeBSD from the CD itself. You would need to perform a network
           based install (e.g., from an FTP server) after booting from the
           CD.

   memstick

           This can be written to an USB memory stick (flash drive) and used
           to do an install on machines capable of booting off USB drives.
           It also supports booting into a "livefs" based rescue mode. There
           are no pre-built packages.

           As one example of how to use the memstick image, assuming the USB
           drive appears as /dev/da0 on your machine something like this
           should work:

           # dd if=FreeBSD-11.0-RELEASE-amd64-memstick.img \
             of=/dev/da0 bs=1m conv=sync

           Be careful to make sure you get the target (of=) correct.

   mini-memstick

           This can be written to an USB memory stick (flash drive) and used
           to boot a machine, but does not contain the installation
           distribution sets on the medium itself, similar to the bootonly
           image. It also supports booting into a "livefs" based rescue
           mode. There are no pre-built packages.

           As one example of how to use the mini-memstick image, assuming
           the USB drive appears as /dev/da0 on your machine something like
           this should work:

           # dd if=FreeBSD-11.0-RELEASE-amd64-mini-memstick.img \
             of=/dev/da0 bs=1m conv=sync

           Be careful to make sure you get the target (of=) correct.

   FreeBSD/arm SD card images

           These can be written to an SD card and used to boot the supported
           arm system. The SD card image contains the full FreeBSD
           installation, and can be installed onto SD cards as small as
           512Mb.

           For convenience for those without console access to the system, a
           freebsd user with a password of freebsd is available by default
           for ssh(1) access. Additionally, the root user password is set to
           root, which it is strongly recommended to change the password for
           both users after gaining access to the system.

           To write the FreeBSD/arm image to an SD card, use the dd(1)
           utility, replacing KERNEL with the appropriate kernel
           configuration name for the system.

           # dd if=FreeBSD-11.0-RELEASE-arm-armv6-KERNEL.img \
             of=/dev/da0 bs=1m conv=sync

           Be careful to make sure you get the target (of=) correct.

   FreeBSD 11.0-RELEASE can also be purchased on CD-ROM or DVD from several
   vendors. One of the vendors that will be offering FreeBSD 11.0-based
   products is:

     * FreeBSD Mall, Inc. https://www.freebsdmall.com

   Pre-installed virtual machine images are also available for the amd64
   (x86_64), i386 (x86_32), and AArch64 (arm64) architectures in QCOW2, VHD,
   and VMDK disk image formats, as well as raw (unformatted) images.

   FreeBSD 11.0-RELEASE amd64 is also available on these cloud hosting
   platforms:

     * Amazon(R) EC2(TM):
       AMIs are available in the following regions:

         us-east-1 region: ami-6ceaab7b
         us-west-1 region: ami-a3f9b7c3
         us-west-2 region: ami-6926f809
         sa-east-1 region: ami-a1ff6dcd
         eu-west-1 region: ami-36581e45
         eu-central-1 region: ami-2352ae4c
         ap-northeast-1 region: ami-a236e9c3
         ap-northeast-2 region: ami-a49044ca
         ap-southeast-1 region: ami-c39337a0
         ap-southeast-2 region: ami-5920133a
         ap-south-1 region: ami-7c3a4e13

       AMIs are also available in the Amazon(R) Marketplace at:
       https://aws.amazon.com/marketplace/pp/B01LWSWRED/

     * Google(R) Compute Engine(TM):
       Instances can be deployed using the gcloud utility:

           % gcloud compute instances create INSTANCE \
             --image freebsd-11-0-release-p1-amd64 \
             --image-project=freebsd-org-cloud-dev
           % gcloud compute ssh INSTANCE

       Replace INSTANCE with the name of the Google Compute Engine instance.

     * Hashicorp/Atlas(R) Vagrant(TM):
       Instances can be deployed using the vagrant utility:

           % vagrant init freebsd/FreeBSD-11.0-RELEASE-p1
           % vagrant up

FTP

   FreeBSD 11.0-RELEASE may be downloaded via ftp from the following site:

     * ftp://ftp.freebsd.org/pub/FreeBSD/releases/ISO-IMAGES/11.0/

   However before trying this site, please check your regional mirror(s)
   first by going to:

     * ftp://ftp.<your_country_code>.FreeBSD.org/pub/FreeBSD

   Any additional mirror sites will be labeled ftp2, ftp3 and so on.

   More information about FreeBSD mirror sites can be found at:

     * https://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/mirrors-ftp.html

   FreeBSD 11.0-RELEASE virtual machine images may be downloaded via ftp