Announcing NetBSD 10.1 (Dec 16, 2024)

Quick links for the impatient:

Download 10.1 from our CDN: amd64 USB, amd64 CD, various ARM devices, full release dir with everything else.

Hashes, signed with the NetBSD Security Officer's PGP key, of all files in the distribution.

Introduction

The NetBSD Project is pleased to announce NetBSD 10.1, the first point release of the NetBSD 10 stable branch.

Upgrade instructions

An existing installation can be upgraded by booting an installation image and selecting the Upgrade option.

If you are using other update methods, update the kernel and modules first, then reboot and update your userspace. You will need to adjust any package repository URL and update all third-party packages. Note also the addition of the new gpufw set, which may need to be installed separately with sysinst(8).

Changes since NetBSD 10.0

Kernel

socket(2): fixed performance regressions.
bridge(4): implemented interface protection, a feature similar to "protected-port" or "isolation" in some router products. When a frame arrives on a protected interface and is being forwarded to another protected interface, the frame will be discarded.
raid(4): implemented hot removal of spares and components.
raidctl(8): implemented single command-line configuration of simple RAID sets.
shmif(4): support link state changes.
wg(4): documentation improvements and various fixes.
NFS: fixes for servers with more than 32GB RAM and leftover minor bugs from the 64 bit time_t transition.
DRM: various fixes.
NPF: bpf code generation fixes.

Device drivers

acpiout(4): fix brightness controls on certain machines.
re(4): add support for Realtek/Killer E2600 Ethernet.
uftdi(4): add support for a range of Brainboxes USB serial adapters.
urtwn(4): add support for the Mercusys MW150USV2 Wi-Fi adapter.
viac7temp(4): add the driver to amd64 GENERIC.
virtio(4): various fixes
apei(4): new driver for ACPI Platform Error Interfaces.

Userspace

shmif_pcapin(1): new utility program for shmif(4) tests.
pax(1): fixes for various edge cases, particularly when creating files.
xsetwallpaper(1): install the manual page.
envstat(8): powerd(8), traceroute(8): add support for CRUNCHOPS to enable building rumpified programs as crunched binaries.
httpd(8): create mobile-friendly directory listings.
ifconfig(8): document parameters for lagg(4): interfaces.
sshd(8): fixed unsafe use of functions in signal handler (CVE-2024-6387).
getentropy(3): expose the now standardized interface to POSIX.1-2024 applications.
ftp(1): update to version 20241129.

Ports

libsa [various bootloaders]: add support for NFSv3 (fallback to NFSv2 if it fails).
aarch64: fixes for Ampere Altra/Altra Max:
aarch64: add some simple PCI audio devices to GENERIC64 (for use in QEMU).
evbppc: automatically discover GPT dk(4) wedges with the WII kernel configuration.
i386: reduce size of ISO image to fit on a CD-ROM again.
hp300: create bootable CD-ROM images.
mac68k, macppc: add a tool mkhybrid(8) to create bootable install CD-ROM images.
x86: various fixes for VIA CPUs.

System

getentropy(3) and arc4random(3): automatically reseed when a VM is cloned.
Mozilla root certs updated to 2024-08-23.

Libraries

stat(2): - documentation improvements.
err(3): - documentation improvements.
strcpy(3): - documentation improvements.
usleep(3): - allow calls with useconds >= 1000000.
libarchive updated to 3.7.7 for security fixes.
Xserver updated to 21.1.14.

Build system

Fixed reproducibility of ntpd(8).
Fixed tools bootstrap on FreeBSD 14.