Subject: Announcing the NetBSD 2.0.2 update
To: None <>
From: James Chacon <>
List: netbsd-announce
Date: 04/14/2005 14:09:35
The NetBSD Project is pleased to announce that update 2.0.2 of the NetBSD
operating system is now available.

About NetBSD 2.0.2

NetBSD 2.0.2 is the second security/critical update of the NetBSD 2.0 release 
branch. This represents a selected subset of fixes deemed critical in nature 
for stability or security reasons. 

This is also the first binary security/critical update since NetBSD
2.0.  NetBSD 2.0.1 was tagged within the CVS repository, and is            
available from there as a source update, but its full binary release      
was preempted by patches incorporated into 2.0.2 and build hardware

All fixes in security/critical updates (ie, NetBSD 2.0.1, 2.0.2, etc)
are cumulative, so the latest update contains all such fixes since the
corresponding minor release.  These fixes will also appear in future
minor releases (ie, NetBSD 2.1, 2.2, etc), together with other
less-critical fixes and feature enhancements.

Complete source and binaries for NetBSD 2.0.2 are available for download at
many sites around the world. A list of download sites providing FTP, AnonCVS,
SUP, and other services is provided at the end of this announcement; the
latest list of available download sites may also be found at:

We encourage users who wish to install via a CD-ROM ISO image to
download via BitTorrent by using the torrent files supplied in the ISO image
area. BitTorrent has recently been added to the list of distribution 
mechanisms and its use is strongly encouraged to help keep bandwidth available.

About NetBSD

The NetBSD operating system is a full-featured, open source, UNIX-like
operating system descended from the Berkeley Networking Release 2 (Net/2),
4.4BSD-Lite, and 4.4BSD-Lite2. NetBSD runs on 54 different system
architectures featuring 17 machine architectures across 17 distinct CPU
families, and is being ported to more. The NetBSD 2.0.2 release contains
complete binary releases for 48 different machine types.     

NetBSD is a highly integrated system. In addition to its highly portable,
high performance kernel, NetBSD features a complete set of user utilities,
compilers for several languages, the X Window System, firewall software and
numerous other tools, all accompanied by full source code. The NetBSD       
Packages Collection contains over 5000 packages and binary package releases
for a number of platforms are currently in progress.

More information on the goals of the NetBSD Project can be procured from the
NetBSD web site at:

NetBSD is free. All of the code is under non-restrictive licenses, and may be
used without paying royalties to anyone. Free support services are available
via our mailing lists and web site. Commercial support is available from a
variety of sources; some are listed at:

More extensive information on NetBSD is available from the NetBSD web site:

NetBSD is the work of a diverse group of people spread around the world. The
`Net' in our name is a tribute to the Internet, which enables us to         
communicate and share code, and without which the project would not exist.  

Major Changes Between 2.0 and 2.0.2

The complete list of changes can be found in the CHANGES-2.0.1 and 
CHANGES-2.0.2 files in the top level doc directory of the NetBSD 2.0.2 
release tree.

The complete list is as follows:


     *   Avoid endless loop in F_CLOSEM fnctl which could be abused for a
         local DOS.
     *   Avoid possible security issues on amd64, x86 and xen by properly
         checking range for copyinstr and copyoutstr.
     *   Make pmap_map() work on sun4 machines so these are usable again.
     *   Fix a UVM problem that causes hangs when large processes fork.
     *   Fix pthreads on sun4c hardware by fixing a problem with detecting
         faults in atomic load/store instructions.
     *   Address further pthread issues on sparc and sparc64 by defining a new
         LWP flag which indicates that we're in the process of doing a context
     *   Make sun3 port functional again by restoring the definition for MAX-
         PHYS as it is now used rather than MAXBSIZE to limit page cache I/O
     *   Prevent lockups/panics if the VOP_LOOKUP() call unlocked the parent
         directory node.
     *   Prevent a kernel panic on boot with a PX graphics card on DECsta-
     *   Fix prep port to be functional by ensuring that the OpenPIC register
         window is mapped during startup.
     *   Clear freed memory in cgd(4) code to avoid possibly security issues.
     *   Prevent panics on powerpc with DIAGNOSTIC kernels and trap handling.
     *   Make the macppc INSTALL kernel bootable again by moving the load
         address to the correct location.
     *   Fix a major issue with sparc64 pmap to prevent crashes under heavy
     *   Fix major performance issue with xen port so idle loop doesn't con-
         sume 100% of cpu time.
     *   Fix xen port so it can reboot cleanly instead of hanging.
     *   MMU fixes for sh3 based ports to prevent reboots under heavy load.

     *   Disabled the oow test in ipf because it is killing valid packets.
     *   Prevent deadlock/panic on NFS clients after NFS server reboots and
         caches aren't in sync.
     *   Fix an NFS panic caused by truncating a file while another client is
         writing data to it.
     *   Avoid infinite loops when getting NFS readdir response without any
         entries or EOF.
     *   Fix possible remote DOS via IPSec AH packets.
     *   Fix major performance issues with the i82547 Gig-E chip which
         improves performance with wm(4)
     *   Fix problems with sk(4) performance on ASUS A8V motherboards.
     *   Prevent panics in ipf when receiving IPv6 packets.
     *   NFS fixes to address incorrect atimes updates and cache coherancy

System administration and user tools

     *   Teach groff about NetBSD versions that aren't on the branches docu-
     *   Add description for Solaris 10 dual boot installation.
     *   Document PTHREAD_CONCURRENCY.
     *   Fix bug in binutils which broke Firefox under NetBSD-sparc64.
     *   Address xpm security problems reported in CAN-2005-0605.
     *   Fix swapcontext(3) for amd64 so that it works correctly.

Please note that at the moment, sysinst will not assist you in installing
pre-built third-party binary packages or the pkgsrc system itself. See the
NetBSD packages collection documentation:

The NetBSD Foundation would like to thank all those who have contributed code,
hardware, documentation, funds, colocation for our servers, web pages and     
other documentation, release engineering, and other resources over the years. 
More information on the people who make NetBSD happen is available at:

We would like to especially thank the University of California at Berkeley and
the GNU Project for particularly large subsets of code that we use. We would   
also like to thank the Internet Software Consortium and the Helsinki
University of Technology for current colocation services.         

About the NetBSD Foundation

The NetBSD Foundation was chartered in 1995, with the task of overseeing core
NetBSD project services, promoting the project within industry and the open
source community, and holding intellectual property rights on much of the
NetBSD code base. Day-to-day operations of the project are handled by
As a non-profit organisation with no commercial backing, The NetBSD
Foundation depends on donations from its users, and we would like to ask      
you to consider making a donation to the NetBSD Foundation in support of 
continuing production of our fine operating system.  Your generous           
donation would be particularly welcome at this point in time, since the
release engineering proccess for NetBSD 2.0 was unfortunately set back
by hardware failures on the build machines, necessitating the immediate
replacement of the equipment.

Donations can be done via PayPal ( and are fully          
tax-deductible in the US.  If you would prefer not to use PayPal, or
would like to make other arrangements, please contact    

NetBSD mirror sites        

Please use a mirror site close to you. 

    * FTP           -             
    * ISO images    -
    * Anonymous CVS -
    * BitTorrent    -    
    * SUP           -                
    * CVSup         -              
    * rsync         -        
    * AFS           -               
    * NFS           -         

Please also note our list of CD-ROM vendors.