This release contains a number of improvements over earlier versions, including but not limited to
Improved hardware support, including new arm64 variants and numerous network and graphics driver updates
Improved general and network performance due to steadily improving multi-core support
More flexible network configuration, now supporting lladdr-based config
retguard for amd64 system calls
Enhanced memory and process security
Relinking of network exposed daemons at boot time
execute-only (xonly)
pinsyscall(2)
Improved versions of OpenSSH (9.3), LibreSSL (3.7.2), OpenBGPD (7.9) …
Support for disk encryption in the installer
X11 Mesa shader cache enabled.
More aggressive randomisation of the stack location for all 64-bit architectures except alpha