The rc.firewall script now supports reading IP addresses or subnets from on-disk files for the firewall_allowservices and firewall_trusted list variables. Elements that look like absolute paths are read line by line, skipping comments and blank lines, and the first word on each line is treated as an address or subnet. The default history size in sh(1) has been increased from 100 to 128, complying with the POSIX.1-2024 minimum requirement. LTO-10 and LTO-10P density codes and cartridge specifications have been added to mt(1) and libmt, enabling detection and reporting of the new tape formats. The default behaviour of pwd(1) has changed from -P to -L, aligning with POSIX semantics. The ipfw(8) binary now includes a fallback mechanism to support the new kernel interface introduced in FreeBSD 15.0. When running with a 15.0+ kernel, ipfw(8) automatically invokes a bundled ipfw15 binary to load firewall rules, ensuring compatibility during upgrade procedures. The daemon(8) utility now supports the -m option to specify the output file mode, allowing non-root log collectors to access log files.