FreeBSD 11.4-RELEASE Release Notes

The FreeBSD Project

FreeBSD is a registered trademark of the FreeBSD Foundation.

IBM, AIX, OS/2, PowerPC, PS/2, S/390, and ThinkPad are trademarks of International Business Machines Corporation in the United States, other countries, or both.

IEEE, POSIX, and 802 are registered trademarks of Institute of Electrical and Electronics Engineers, Inc. in the United States.

Intel, Celeron, Centrino, Core, EtherExpress, i386, i486, Itanium, Pentium, and Xeon are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries.

SPARC, SPARC64, and UltraSPARC are trademarks of SPARC International, Inc in the United States and other countries. SPARC International, Inc owns all of the SPARC trademarks and under licensing agreements allows the proper use of these trademarks by its members.

Many of the designations used by manufacturers and sellers to distinguish their products are claimed as trademarks. Where those designations appear in this document, and the FreeBSD Project was aware of the trademark claim, the designations have been followed by the or the ® symbol.

Last modified on 2020-05-12 16:06:45 EDT by gjb.

The release notes for FreeBSD 11.4-RELEASE contain a summary of the changes made to the FreeBSD base system on the 11.4-STABLE development line. This document lists applicable security advisories that were issued since the last release, as well as significant changes to the FreeBSD kernel and userland. Some brief remarks on upgrading are also presented.

Table of Contents
1. Introduction
2. Upgrading from Previous Releases of FreeBSD
3. Security and Errata
3.1. Security Advisories
3.2. Errata Notices
4. Userland
4.1. Userland Configuration Changes
4.2. Userland Application Changes
4.3. Contributed Software
4.4. Installation and Configuration Tools
4.5. /etc/rc.d Scripts
4.6. /etc/periodic Scripts
4.7. Runtime Libraries and API
4.8. ABI Compatibility
4.9. Userland Debugging
5. Kernel
5.1. General Kernel Changes
5.2. Kernel Bug Fixes
5.3. Kernel Configuration
5.4. Kernel Modules
5.5. System Tuning and Controls
6. Devices and Drivers
6.1. Device Drivers
6.2. Storage Drivers
6.3. Network Drivers
7. Hardware Support
7.1. Hardware Support
7.2. Virtualization Support
7.3. ARM Support
8. Storage
8.1. General Storage
8.2. Networked Storage
8.3. ZFS
8.4. geom(4)
9. Boot Loader Changes
9.1. Boot Loader Changes
9.2. Boot Menu Changes
10. Networking
10.1. General Network Changes
10.2. Network Protocols
11. Ports Collection and Package Infrastructure
11.1. Infrastructure Changes
11.2. Packaging Changes
12. Documentation
12.1. Documentation Source Changes
12.2. Documentation Toolchain Changes
13. Release Engineering and Integration
13.1. Integration Changes

1. Introduction

This document contains the release notes for FreeBSD 11.4-RELEASE. It describes recently added, changed, or deleted features of FreeBSD. It also provides some notes on upgrading from previous versions of FreeBSD.

This distribution of FreeBSD 11.4-RELEASE is a release distribution. It can be found at or any of its mirrors. More information on obtaining this (or other) release distributions of FreeBSD can be found in the Obtaining FreeBSD appendix to the FreeBSD Handbook.

All users are encouraged to consult the release errata before installing FreeBSD. The errata document is updated with late-breaking information discovered late in the release cycle or after the release. Typically, it contains information on known bugs, security advisories, and corrections to documentation. An up-to-date copy of the errata for FreeBSD 11.4-RELEASE can be found on the FreeBSD Web site.

This document describes the most user-visible new or changed features in FreeBSD since 11.3-RELEASE. In general, changes described here are unique to the 11.4-STABLE branch unless specifically marked as MERGED features.

Typical release note items document recent security advisories issued after 11.3-RELEASE, new drivers or hardware support, new commands or options, major bug fixes, or contributed software upgrades. They may also list changes to major ports/packages or release engineering practices. Clearly the release notes cannot list every single change made to FreeBSD between releases; this document focuses primarily on security advisories, user-visible changes, and major architectural improvements.

2. Upgrading from Previous Releases of FreeBSD

[amd64,i386] Binary upgrades between RELEASE versions (and snapshots of the various security branches) are supported using the freebsd-update(8) utility. The binary upgrade procedure will update unmodified userland utilities, as well as unmodified GENERIC kernels distributed as a part of an official FreeBSD release. The freebsd-update(8) utility requires that the host being upgraded have Internet connectivity.

Source-based upgrades (those based on recompiling the FreeBSD base system from source code) from previous versions are supported, according to the instructions in /usr/src/UPDATING.


Upgrading FreeBSD should only be attempted after backing up all data and configuration files.

3. Security and Errata

This section lists the various Security Advisories and Errata Notices since 11.3-RELEASE.

3.1. Security Advisories

FreeBSD-SA-19:12.telnet24 July 2019

Multiple vulnerabilities

FreeBSD-SA-19:13.pts24 July 2019

Write-after-free vulnerability

FreeBSD-SA-19:14.freebsd3224 July 2019

Kernel memory disclosure

FreeBSD-SA-19:15.mqueuefs24 July 2019

Reference count overflow

FreeBSD-SA-19:16.bhyve24 July 2019

xhci(4) out-of-bounds read

FreeBSD-SA-19:17.fd24 July 2019

Reference count leak

FreeBSD-SA-19:18.bzip26 August 2019

Multiple vulnerabilities

FreeBSD-SA-19:19.mldv26 August 2019

Out-of-bounds memory access

FreeBSD-SA-19:20.bsnmp6 August 2019

Insufficient message length validation

FreeBSD-SA-19:21.bhyve6 August 2019

Insufficient validation of guest-supplied data

FreeBSD-SA-19:22.mbuf20 August 2019

IPv6 remove denial-of-service

FreeBSD-SA-19:23.midi20 August 2019

Kernel memory disclosure

FreeBSD-SA-19:24.mqueuefs20 August 2019

Reference count overflow

FreeBSD-SA-19:25.mcepce12 November 2019

Machine Check Exception on Page Size Change

FreeBSD-SA-19:26.mcu12 November 2019

Intel CPU Microcode Update

FreeBSD-SA-20:01.libfetch28 January 2020

fetch(3) buffer overflow

FreeBSD-SA-20:03.thrmisc28 January 2020

Kernel stack data disclosure

FreeBSD-SA-20:04.tcp18 March 2020

TCP IPv6 SYN cache kernel information disclosure

FreeBSD-SA-20:05.if_oce_ioctl18 March 2020

Insufficient ioctl(2) privilege checking

FreeBSD-SA-20:07.epair18 March 2020

Incorrect user-controlled pointer use

FreeBSD-SA-20:08.jail18 March 2020

Kernel memory disclosure with nested jails

FreeBSD-SA-20:09.ntp18 March 2020

Multiple denial of service

FreeBSD-SA-20:10.ipfw21 April 2020

Invalid mbuf(9) handling

FreeBSD-SA-20:12.libalias12 May 2020

Insufficient packet length validation

FreeBSD-SA-20:13.libalias12 May 2020

Memory disclosure vulnerability

3.2. Errata Notices

FreeBSD-EN-19:13.mds24 July 2019

System crash from Intel CPU vulnerability mitigation

FreeBSD-EN-19:15.libunwind6 August 2019

Incorrect exception handling

FreeBSD-EN-19:16.bhyve20 August 2019

Instruction emulation improvements

FreeBSD-EN-19:17.ipfw20 August 2019

"jail" keyword fix

FreeBSD-EN-19:18.tzdata23 October 2019

Timezone database information update

FreeBSD-EN-20:01.ssp28 January 2020

Imprecise orderring of canary initialization

FreeBSD-EN-20:02.nmount28 January 2020

Invalid pointer dereference

FreeBSD-EN-20:04.pfctl18 March 2020

Missing pfctl(8) tunable

FreeBSD-EN-20:06.ipv618 March 2020

Incorrect checksum calculations

FreeBSD-EN-20:07.quotad21 April 2020

Regression with certain NFS servers

4. Userland

This section covers changes and additions to userland applications, contributed software, and system utilities.

4.1. Userland Configuration Changes


4.2. Userland Application Changes

The camcontrol(8) utility has been updated to include support for Accessible Max Address Configuration (AMA). [r350801] (Sponsored by iXsystems)

The camcontrol(8) utility has been updated to support block descriptors with the modepage subcommand. [r351582]

The usbconfig(8) utility has been updated to include the detach_kernel_driver command. [r351843]

The jot(1) utility has been updated to allow an endless stream of random data within the specified bounds. [r351873]

The freebsd-update(8) utility has been updated to include two new commands, updatesready and showconfig. [r352758]

The cron(8) utility has been updated to support two new flags in crontab(5), -n and -q, which suppress mail on successful runs and suppress logging of command execution, respectively. [r353134]

The zfs(8) utility has been updated to support renaming bookmarks. [r353759]

The usbconfig(8) utility has been updated to include the dump_stats command. [r356401]

The fsck_ffs(8) and newfs(8) utilities has been updated to fix recovery information with sector sizes up to 64k. [r356905]

The certctl(8) utility has been added. [r357082]

The env(1) utility has been updated to include the -L and -U options, which are used to set the environment of the specified user from login.conf and ~/.login_conf, respectively. [r357791]

The syslogd(8) utility has been updated to add property-based filters. [r359740]

4.3. Contributed Software

The bzip2(1) utility has been updated to version 1.0.8. [r351007]

The WPA utilities have been updated to version 2.9. [r351611]

The tcsh(1) utility has been updated to version 6.21.0. [r354195]

The less(1) utility has been updated to version 551. [r355504]

The libbsdxml(3) library has been updated to version 2.2.9. [r355604]

OpenSSL has been update to version 1.0.2u. [r356290]

The pcap(3) library has been updated to version 1.9.1. [r356341]

The tcpdump(1) utility has been updated to version 4.9.3. [r356341]

The unbound(8) utility has been updated to version 1.9.6. [r356345]

The mtree(8) utility has been updated to include several bug fixes. [r356533]

The archive(3) library has been updated to version 3.4.2. [r358088]

The ntpd(8) utilities have been updated to version 4.2.8p14. [r358659]

The timezone database files have been updated to version 2020a. [r360362]

The file(1) utility has been updated to version 5.38. [r360521]

The xz(1) utility has been updated to version 5.2.5. [r360523]

The clang, llvm, lld, lldb, libunwind, openmp, compiler-rt utilities and libc++ have been updated to version 10.0.0. [r360822]

4.4. Installation and Configuration Tools


4.5. /etc/rc.d Scripts


4.6. /etc/periodic Scripts


4.7. Runtime Libraries and API


4.8. ABI Compatibility


4.9. Userland Debugging


5. Kernel

This section covers changes to kernel configurations, system tuning, and system control parameters that are not otherwise categorized.

5.1. General Kernel Changes


5.2. Kernel Bug Fixes


5.3. Kernel Configuration


5.4. Kernel Modules


5.5. System Tuning and Controls


6. Devices and Drivers

This section covers changes and additions to devices and device drivers since 11.3-RELEASE.

6.1. Device Drivers


6.2. Storage Drivers


6.3. Network Drivers


7. Hardware Support

This section covers general hardware support for physical machines, hypervisors, and virtualization environments, as well as hardware changes and updates that do not otherwise fit in other sections of this document.

7.1. Hardware Support


7.2. Virtualization Support


7.3. ARM Support


8. Storage

This section covers changes and additions to file systems and other storage subsystems, both local and networked.

8.1. General Storage


8.2. Networked Storage


8.3. ZFS

The ZFS ZIL (ZFS intent log) maximum block size is now tunable. [r359554]

8.4. geom(4)


9. Boot Loader Changes

This section covers the boot loader, boot menu, and other boot-related changes.

9.1. Boot Loader Changes


9.2. Boot Menu Changes


10. Networking

This section describes changes that affect networking in FreeBSD.

10.1. General Network Changes


10.2. Network Protocols

The libalias(3) library and ipfw(4) packet filter have been updated to add support for RFC 6598/Carrier Grade NAT subnets. [r359695]

11. Ports Collection and Package Infrastructure

This section covers changes to the FreeBSD Ports Collection, package infrastructure, and package maintenance and installation tools.

11.1. Infrastructure Changes


11.2. Packaging Changes


12. Documentation

This section covers changes to the FreeBSD Documentation Project sources and toolchain.

12.1. Documentation Source Changes


12.2. Documentation Toolchain Changes


13. Release Engineering and Integration

This section convers changes that are specific to the FreeBSD Release Engineering processes.

13.1. Integration Changes


This file, and other release-related documents, can be downloaded from

For questions about FreeBSD, read the documentation before contacting <>.

All users of FreeBSD 11.4-STABLE should subscribe to the <> mailing list.

For questions about this documentation, e-mail <>.