Announcing NetBSD 3.0.2

The NetBSD Project is pleased to announce that version 3.0.2 of the NetBSD operating system are now available in both source and binary form. NetBSD is a general-purpose Open Source operating system that provides interfaces for running a wide range of applications on a big number of different hardware platforms, all from one source tree. NetBSD 3.0.2 contains a selected subset of critical bugfixes and security updates over NetBSD 3.0.

About NetBSD 3.0.2

NetBSD 3.0.2 is the second security/critical update of the NetBSD 3.0 release branch. This represents a selected subset of fixes deemed critical in nature for stability or security reasons.

All fixes in security/critical updates (ie, NetBSD 3.0.1, 3.0.2, etc) are cumulative, so this latest update contains all such fixes since the NetBSD 3.0 release. These fixes also appear in the 3.1 release and future releases (ie, NetBSD 3.2, 4.0, etc), together with other less-critical fixes and feature enhancements.

Complete source and binaries for NetBSD 3.0.2 are available for download at many sites around the world. A list of download sites providing FTP, AnonCVS, SUP, and other services is provided at the end of this announcement; the latest list of available download sites may also be found at http://www.NetBSD.org/mirrors/.

We encourage users who wish to install via a CD-ROM ISO image to download via BitTorrent by using the torrent files supplied in the ISO image area. BitTorrent has recently been added to the list of distribution mechanisms and its use is strongly encouraged to help keep bandwidth available.

About NetBSD

NetBSD is a general-purpose Open Source operating system that provides interfaces for running a wide range of applications on a big number of different hardware platforms, all from one source tree. Applications can range from proprietary closed source applications to Open Source software, covering desktop environments, database servers, firewalls, routers, embedded appliances and many more, all made available easily through pkgsrc, the NetBSD Packages Collection, which currently contains over 6.300 packages. Picking up its ancestry from the Berkeley Networking Release 2 (Net/2), 4.4BSD-lite and 4.4BSD-Lite2, the NetBSD project continues to provide its application platform on a wide range of hardware platforms - not only vintage hardware, but also modern desktop and server hardware with Intel and AMD Opteron CPUs as well as embedded systems with MIPS, PowerPC, Super-H, ARM and Xscale CPUs. More recently, NetBSD was also ported to "virtual" hardware provided by the Xen machine monitor. Today, NetBSD runs on 54 different system architectures featuring 17 machine architectures across 17 distinct CPU families, all from a single source tree. In addition, the system offers cross compiling for the kernel, userland and the X Window system.

The NetBSD 3.0.2 release contains complete binary releases for 53 different machine types, and support for four more machine architectures in source form.

More information on the goals of the NetBSD Project can be procured from the NetBSD web site at http://www.NetBSD.org/Goals/.

NetBSD is free. All of the code is under non-restrictive licenses, and may be used without paying royalties to anyone. Free support services are available via our mailing lists and web site. Commercial support is available from a variety of sources; some are listed at http://www.NetBSD.org/gallery/consultants.html.

More extensive information on NetBSD is available from the NetBSD web site http://www.NetBSD.org/.

NetBSD is the work of a diverse group of people spread around the world. The `Net' in our name is a tribute to the Internet, which enables us to communicate and share code, and without which the project would not exist.

Major Changes Between 3.0.1 and 3.0.2

The complete list of changes can be found in the CHANGES-3.0.2 file in the top level directory of the NetBSD 3.0.2 release tree.

  • Kernel
    • Avoid a panic in page fault handling that could occur under low-memory conditions.
  • Networking
    • Changed the default sshd_config(5) to enable SSH version 2 only.
    • Don't accept TCP connections to broadcast addresses.
  • File system
    • Fixed race condition in NFS renaming that could cause the renamed file to be deleted.
  • Libraries
    • When a user is created, initialize the string of secondary groups to avoid it containing garbage when none is added.
  • Security
    • Fixed a buffer overflow in the in-kernel PPP code share by ISDN PPP interfaces ippp(4) and pppoe(4) (SA2006-019).
    • X11: fixed an integer overflow in FreeType (SA2006-020).
    • Fixed a potential DoS attack with sendmail(8) (SA2006-017).
    • Fixed a DoS vulnerability in BIND (SA2006-022).
    • Fixed a RSA signature forgery in openssl(1) (SA2006-023).
    • X11: fixed a vulnerability in Adobe Type 1 font handling (SA2006-021).
    • Fixed a number of DoS vulnerabilities in openssl(1) (SA in preparation, CVE entries: 2006-2937, 2940, 3738 and 4343).
    • Fixed a number of DoS vulnerabilities in sshd(8) (SA in preparation, CVE entries: 2006-4924 and 5051).
  • Miscellaneous
    • Fixed cross-building from hosts using GCC 4.x.
  • amd64 specific
    • Make sure that the system reboots after a panic instead of halting.
  • sparc specific
    • Disabled threading in named(8) on sparc and sparc64 to avoid a crash.
  • mac68k specific
    • sysinst now newfs'es and mounts the target filesystem(s).

Acknowledgments

The NetBSD Foundation would like to thank all those who have contributed code, hardware, documentation, funds, colocation for our servers, web pages and other documentation, release engineering, and other resources over the years. More information on the people who make NetBSD happen is available at http://www.NetBSD.org/people/.

We would like to especially thank the University of California at Berkeley and the GNU Project for particularly large subsets of code that we use. We would also like to thank the Internet Systems Consortium and the Helsinki University of Technology for current colocation services.

About the NetBSD Foundation

The NetBSD Foundation was chartered in 1995, with the task of overseeing core NetBSD project services, promoting the project within industry and the open source community, and holding intellectual property rights on much of the NetBSD code base. Day-to-day operations of the project are handled by volunteers.

As a non-profit organisation with no commercial backing, The NetBSD Foundation depends on donations from its users, and we would like to ask you to consider making a donation to the NetBSD Foundation in support of continuing production of our fine operating system.

Donations can be done via PayPal and are fully tax- deductible in the US. If you would prefer not to use PayPal, or would like to make other arrangements, please contact .

NetBSD mirror sites

Please use a mirror site close to you.

Please also note our list of CD-ROM vendors.

Back to  NetBSD 3.x formal releases