Announcing NetBSD 10.2 (September 15, 2026)

Quick links for the impatient:

Download 10.2 from our CDN: amd64 USB, amd64 CD, various ARM devices, full release dir with everything else.

Hashes, signed with the NetBSD Security Officer's PGP key, of all files in the distribution.

Introduction

The NetBSD Project is pleased to announce NetBSD 10.2, the second point release of the NetBSD 10 stable branch.

Upgrade instructions

An existing installation can be upgraded by booting an installation image and selecting the Upgrade option.

If you are using other update methods, update the kernel and modules first, then reboot and update your userspace. You will need to adjust any package repository URL and update all third-party packages. Note also the addition of the new gpufw set, which may need to be installed separately with sysinst(8).

Changes since NetBSD 10.1

Userspace

  • calendars: updated dates of moving holidays for 2026.
  • build.sh: fixed various compilation issues with newer GCC versions.
  • build.sh: add a new operation show-revisionid that extracts a marker usable to recreate the source (depending on the revision control system in use).
  • build.sh: make reproducable builds work when -P is passed on the build.sh command line and MKREPRO_TIMESTAMP is set manually via -V. (PR 59512)
  • ftp(1): add connect command as a synonym for open.
  • ftp(1): simplify buffer handling to improve performance.
  • rmdir(1): add -v option.
  • telnet(1): fixed various security issues.
  • fsck_ffs(8): allow checking file systems with more than 2^32 blocks.
  • httpd(8): serve .iso files as "application/octet-stream", fix some memory leaks, enhance documentation.
  • makefs(8): honour the -m option to set the maximum disc size for cd9660. (PR 59889)
  • showmount(8): always print a space after the exported directory. (PR 59459)
  • syslogd(8): fixed various reliability issues.

Kernel

  • ipfilter: fixed a remotely triggerable null pointer dereference.
  • netinet: fixed a 4-byte leak of kernel stack data through TCP timestamps.
  • nfs: fixed various security issues.
  • axen(4): added support for ASIX AX88179A USB Ethernet.
  • bwi(4): removed unnecessary delays. various performance and stability enhancements.
  • crypto(4), opencrypto(9): various reliability fixes.
  • ehci(4): detect USB bus on AMD SB600/SB700. (PR 57359)
  • hdaudio(4): implemented access checks for the /dev/hdaudio device.
  • igc(4): added support for TCP Segmentation Offload (TSO).
  • iwm(4): improved stability.
  • rge(4): enabled IPv4/TCP4/UDP4 checksum offloading.
  • rge(4): added support for Realtek RTL8126 5Gbps Ethernet.
  • rge(4): added support for RTL8125D revision 0x6890000.
  • sdhc(4): improved performance.
  • sdmmc(4): removed unnecessary delays.
  • urtwn(4): added support for Asus USB-N10 Nano B1 Wi-Fi adapter.
  • viaide(4): various enhancements to support additional controllers and features.
  • wg(4): various reliability fixes and enhancements.
  • wskbd(4): define USB and PS/2 keymaps for Polish keyboards. (PR 57234, 57844, and 58405)

Ports

  • i386: fixed AMD Geode acceleration with Xorg.
  • amd64: add PVH boot capability for non-Xen guests (QEMU -kernel option).
  • amd64, aarch64: add support for the VMware PV SCSI controller found in VMware ESXi.
  • evbarm: implemented the DRM/KMS atomic interface for 64-bit Allwinner SoCs, fixing HDMI output (regression from -9).
  • evbarm: fixed Olimex A64 ethernet.
  • evbarm: support the amlogic,meson-gxl-usb-ctrl as found in the Libre Computer AML-S905X-CC.
  • evbarm: add support for the RIoTboard i.MX6S IOMUX controller.
  • evbarm: exynos 5410 clock driver fixes.
  • evbppc: wii: add support for bwi(4) WLAN.
  • evbppc: wii: add support for the DVD drive.
  • evbppc: wii: add support for using a USB Gecko as serial console.
  • evbppc: wii: add support for the hardware AES engine.
  • evbppc: wii: use GX to accelerate RGB to YUY2 conversion.
  • hppa: add missing fma(3) and variants to libm.
  • hppa: fix qemu-system-hppa -kernel netbsd for newer qemu and seabios version 16.
  • hppa: fix CPU model detection on HP 9000 745i/50.
  • mips: fix booting on R5000SC systems.
  • vax: fix a few X11-related bugs with spx(4) video card.
  • x86: fix MP boot issues on newer Apollo Lake CPUs. (PR 58982)

Third-party software

  • expat: install expat_config.h to fix the compilation of some third-party code.
  • tzdata: update to 2026b.
  • libXpm: apply upstream fixes for CVE-2026-4367.
  • Xorg(1): update to 21.1.24 (fixes various security issues)
  • openssl(1): update to 3.0.21 (fixes various security issues)
  • tmux(1): update to 3.6a
  • xkbcomp(1): update to 1.5.0 (fixes various security issues)
  • unbound(8): apply upstream patch to fix CVE-2025-11411.