# $NetBSD: CHANGES-10.3,v 1.1.2.21 2026/10/24 11:33:47 martin Exp $ A complete list of changes from the NetBSD 10.2 release on 2026-09-15 until the 10.3 release: doc/CHANGES-10.3 created doc/LAST_MINUTE patched by hand doc/README.files patched by hand external/gpl2/groff/tmac/mdoc.local patched by hand sys/sys/param.h patched by hand Welcome to 10.2_STABLE! sys/arch/aarch64/aarch64/fpu.c 1.15 arm64: fix aarch64 FP defaults on 64-bit only CPUs. [jmcneill, ticket #1340] sys/external/bsd/drm2/dist/drm/i915/display/intel_dp.c 1.8 i915: PR 59989:: make this build with -O0. [hgutch, ticket #1342] sys/dev/pci/if_ixl.c 1.102-1.105 ixl(4): PR 60736: fix link state handling. [tls, ticket #1343] usr.sbin/npf/npfctl/npf_build.c 1.64,1.67 npf: PR 60740: improve error message when table updates fail. [joe, ticket #1344] sys/dev/ic/rtl8169.c 1.184 re(4): fix mangled TX queue on DMA map loading errors. [tsutsui, ticket #1346] sys/arch/mips/mips/mipsX_subr.S 1.119 mips: PR 60664: fix rdhwr emulation wrt TLB misses on loading the faulting instruction. [skrll, ticket #1347] share/examples/npf/host-npf.conf 1.13,1.14 share/examples/npf/soho_gw-npf.conf 1.22 Fix a couple more ``blacklist --> blocklist'' [hgutch, ticket #1348] sys/arch/x86/include/specialreg.h 1.223 x86: fix CPU identification for Zhaoxin family 7 CPUs. [andvar, ticket #1349] sys/arch/x86/x86/tsc.c 1.65-1.67 x86: add support for invariant TSC for recent Zhaoxin CPUs. [andvar, ticket #1350] external/mit/xorg-server/dist/ChangeLog up to 1.1.1.35 external/mit/xorg-server/dist/configure up to 1.28 external/mit/xorg-server/dist/configure.ac up to 1.30 external/mit/xorg-server/dist/meson.build up to 1.1.1.25 external/mit/xorg-server/dist/Xext/xtest.c up to 1.11 external/mit/xorg-server/dist/Xi/exevents.c up to 1.1.1.16 external/mit/xorg-server/dist/Xi/extinit.c up to 1.1.1.10 external/mit/xorg-server/dist/Xi/xibarriers.c up to 1.7 external/mit/xorg-server/dist/Xi/xipassivegrab.c up to 1.10 external/mit/xorg-server/dist/Xi/xiquerydevice.c up to 1.6 external/mit/xorg-server/dist/config/udev.c up to 1.1.1.7 external/mit/xorg-server/dist/dix/devices.c up to 1.18 external/mit/xorg-server/dist/dix/region.c up to 1.5 external/mit/xorg-server/dist/dri3/meson.build up to 1.1.1.3 external/mit/xorg-server/dist/exa/exa_accel.c up to 1.8 external/mit/xorg-server/dist/fb/fb.h up to 1.4 external/mit/xorg-server/dist/fb/fbgc.c up to 1.1.1.6 external/mit/xorg-server/dist/glamor/glamor_compositerects.c up to 1.1.1.2 external/mit/xorg-server/dist/glx/glxcmds.c up to 1.18 external/mit/xorg-server/dist/hw/kdrive/src/kinput.c up to 1.1.1.10 external/mit/xorg-server/dist/hw/xfree86/common/xf86.h up to 1.7 external/mit/xorg-server/dist/hw/xfree86/common/xf86Configure.c up to 1.14 external/mit/xorg-server/dist/hw/xfree86/common/xf86fbman.c up to 1.1.1.6 external/mit/xorg-server/dist/hw/xfree86/common/xf86platformBus.c up to 1.1.1.4 external/mit/xorg-server/dist/hw/xfree86/drivers/modesetting/dri2.c up to 1.1.1.6 external/mit/xorg-server/dist/hw/xfree86/drivers/modesetting/drmmode_display.c up to 1.13 external/mit/xorg-server/dist/hw/xfree86/int10/meson.build up to 1.1.1.3 external/mit/xorg-server/dist/hw/xfree86/man/xorg.conf.man up to 1.1.1.8 external/mit/xorg-server/dist/hw/xfree86/os-support/meson.build up to 1.1.1.4 external/mit/xorg-server/dist/hw/xfree86/parser/Files.c up to 1.1.1.7 external/mit/xorg-server/dist/hw/xfree86/parser/Flags.c up to 1.1.1.9 external/mit/xorg-server/dist/hw/xfree86/parser/scan.c up to 1.1.1.8 external/mit/xorg-server/dist/hw/xquartz/X11Application.m up to 1.1.1.12 external/mit/xorg-server/dist/hw/xquartz/GL/indirect.c up to 1.1.1.9 external/mit/xorg-server/dist/hw/xquartz/xpr/dri.c up to 1.1.1.7 external/mit/xorg-server/dist/include/xkbstr.h up to 1.1.1.5 external/mit/xorg-server/dist/mi/miarc.c up to 1.6 external/mit/xorg-server/dist/miext/damage/damage.c up to 1.1.1.7 external/mit/xorg-server/dist/miext/damage/damagestr.h up to 1.1.1.6 external/mit/xorg-server/dist/os/utils.c up to 1.16 external/mit/xorg-server/dist/present/present_notify.c up to 1.1.1.5 external/mit/xorg-server/dist/randr/rrproviderproperty.c up to 1.1.1.4 external/mit/xorg-server/dist/render/glyph.c up to 1.7 external/mit/xorg-server/dist/test/string.c up to 1.1.1.4 external/mit/xorg-server/dist/test/xi2/protocol-eventconvert.c up to 1.1.1.6 external/mit/xorg-server/dist/test/xi2/protocol-xiquerydevice.c up to 1.1.1.6 external/mit/xorg-server/dist/xkb/XKBAlloc.c up to 1.1.1.7 external/mit/xorg-server/dist/xkb/XKBMAlloc.c up to 1.1.1.9 external/mit/xorg-server/dist/xkb/ddxBeep.c up to 1.1.1.5 external/mit/xorg-server/dist/xkb/xkb.c up to 1.15 external/mit/xorg-server/dist/xkb/xkbInit.c up to 1.1.1.7 external/mit/xorg-server/dist/xkb/xkbUtils.c up to 1.1.1.11 external/mit/xorg-server/dist/xkb/xkmread.c up to 1.1.1.7 external/mit/xorg-server/include/dix-config.h up to 1.61 external/mit/xorg-server/include/version-config.h up to 1.31 external/mit/xorg-server/include/xorg-config.h up to 1.41 external/mit/xorg-server/include/xorg-server.h up to 1.41 share/mk/bsd.x11.mk (apply patch) Import xorg-server 21.1.25 [mrg, ticket #1351] tests/lib/libc/sys/t_posix_fadvise.c 1.4 t_posix_fadvise: PR 53931: don't check whether errno is preserved. [riastradh, ticket #1352] tests/lib/librumphijack/t_tcpip.sh 1.23,1.25,1.26 t_tcpip: PR 49674, PR 59278, PR 59354: fix test issues. [riastradh, ticket #1353] libexec/ld.elf_so/headers.c 1.73 sys/arch/mips/include/elf_machdep.h 1.21 tests/libexec/ld.elf_so/t_dlinfo.c 1.7,1.8 tests/libexec/ld.elf_so/t_rtld_r_debug.c 1.4,1.5,1.7-1.11 ld.elf_so(1): PR 55908 and 59296: fix PIE debug data on mips. gdb(1): PR 55908: make 32bit gdb work on mips64. t_rtld_r_debug: PR 59296: fix test. [riastradh, ticket #1354] external/gpl3/gcc/dist/gcc/config/arm/arm.cc 1.2,1.3 (patch) (applied to arm.c on the branch) external/gpl3/gcc/dist/gcc/config/arm/arm.h 1.27 (patch) external/gpl3/gcc/dist/gcc/config/arm/arm.md 1.24 (patch) gcc/arm: PR 57638: for -mtp=soft, ensure stack alignment even in leaves. [riastradh, ticket #1356] build.sh 1.406 tools/Makefile.gnuhost 1.58 build: protect against autoconf/Xcode mishegas on macOS. [tls, ticket #1357] libexec/ld.elf_so/Makefile 1.152 (patch) share/mk/bsd.kmodule.mk 1.87,1.88 (patch) share/mk/bsd.lib.mk 1.424 (patch) share/mk/bsd.prog.mk 1.360,1.361 (patch) build: PR 57241: fix parallel builds of debug data. [riastradh, ticket #1355] libexec/httpd/bozohttpd.8 1.103 bozohttpd(8): clarify how the CGI options work. [nia, ticket #1358] usr.sbin/pwd_mkdb/pwd_mkdb.c 1.63 pwd_mkdb(8): don't try to get the database version from the host's database when running cross. [tls, ticket #1359] common/lib/libc/stdlib/random.c 1.9 tools/compat/Makefile 1.98 tools/compat/compat_defs.h 1.134 build: make builds reproducible across hosts with different libc random(3) implementations. [tls, ticket #1360] sys/dev/pci/if_vr.c 1.139 vr(4): PR 60848: reinitialize device when rx engine fails to go to the idle state. [andvar, ticket #1361] sys/net/bsd-comp.c 1.24 ppp(4): fix bounds check in bsd_decompress(). [mrg, ticket #1362] lib/libc/stdio/vfwprintf.c 1.42,1.43 printf(3): PR 60708, PR 60496: fix 'F' format for positional parameters. Fix multi-byte decimal point and grouping separator. [kre, ticket #1363] common/lib/libc/string/memset2.c 1.12 mips: PR 60780: fix undefined behaviour. [kre, ticket #1364] sys/dev/pci/if_vr.c 1.140 vr(4): PR 60884: fix promiscous mode setting. [andvar, ticket #1365] tools/gmp/Makefile 1.7 gcc: PR 60904: fix compiler core dumps on MacOS on Apple Silicon. [tls, ticket #1366] distrib/sets/lists/base/mi 1.1391,1.1392 etc/mtree/NetBSD.dist.base 1.265 etc/namedb/bind.keys 1.3 named(8): PR 52465, PR 60864: fix config dirs and root keys. [jnemeth, ticket #1367] external/bsd/fetch/dist/libfetch/common.c 1.14 libfetch: PR 60878: verify hostname against certificate. [riastradh, ticket #1382] distrib/sets/lists/base/mi 1.1393,1.1394 (patch) doc/3RDPARTY 1.2267 (patch) external/mpl/mozilla-certdata/share/Makefile 1.6 external/mpl/mozilla-certdata/share/certs/AffirmTrust_Commercial.pem delete external/mpl/mozilla-certdata/share/certs/AffirmTrust_Networking.pem delete external/mpl/mozilla-certdata/share/certs/AffirmTrust_Premium.pem delete external/mpl/mozilla-certdata/share/certs/AffirmTrust_Premium_ECC.pem delete external/mpl/mozilla-certdata/share/certs/Baltimore_CyberTrust_Root.pem delete external/mpl/mozilla-certdata/share/certs/CommScope_Public_Trust_ECC_Root-01.pem delete external/mpl/mozilla-certdata/share/certs/CommScope_Public_Trust_ECC_Root-02.pem delete external/mpl/mozilla-certdata/share/certs/CommScope_Public_Trust_RSA_Root-01.pem delete external/mpl/mozilla-certdata/share/certs/CommScope_Public_Trust_RSA_Root-02.pem delete external/mpl/mozilla-certdata/share/certs/D-TRUST_BR_Root_CA_2_2023.pem 1.1 external/mpl/mozilla-certdata/share/certs/D-TRUST_EV_Root_CA_2_2023.pem 1.1 external/mpl/mozilla-certdata/share/certs/Entrust_Root_Certification_Authority.pem delete external/mpl/mozilla-certdata/share/certs/Explicitly_Distrust_DigiNotar_Root_CA.pem delete external/mpl/mozilla-certdata/share/certs/FIRMAPROFESIONAL_CA_ROOT-A_WEB.pem delete external/mpl/mozilla-certdata/share/certs/GLOBALTRUST_2020.pem delete external/mpl/mozilla-certdata/share/certs/OISTE_Client_Root_ECC_G1.pem 1.1 external/mpl/mozilla-certdata/share/certs/OISTE_Client_Root_RSA_G1.pem 1.1 external/mpl/mozilla-certdata/share/certs/OISTE_Server_Root_ECC_G1.pem 1.1 external/mpl/mozilla-certdata/share/certs/OISTE_Server_Root_RSA_G1.pem 1.1 external/mpl/mozilla-certdata/share/certs/SECOM_SMIME_RSA_Root_CA_2024.pem 1.1 external/mpl/mozilla-certdata/share/certs/SECOM_TLS_ECC_Root_CA_2024.pem 1.1 external/mpl/mozilla-certdata/share/certs/SECOM_TLS_RSA_Root_CA_2024.pem 1.1 external/mpl/mozilla-certdata/share/certs/SecureSign_RootCA11.pem delete external/mpl/mozilla-certdata/share/certs/SecureSign_Root_CA12.pem delete external/mpl/mozilla-certdata/share/certs/SecureSign_Root_CA16.pem 1.1 external/mpl/mozilla-certdata/share/certs/SecureTrust_CA.pem delete external/mpl/mozilla-certdata/share/certs/Secure_Global_CA.pem delete external/mpl/mozilla-certdata/share/certs/Security_Communication_RootCA3.pem delete external/mpl/mozilla-certdata/share/certs/SwissSign_RSA_SMIME_Root_CA_2022_-_1.pem 1.1 external/mpl/mozilla-certdata/share/certs/SwissSign_RSA_TLS_Root_CA_2022_-_1.pem 1.1 external/mpl/mozilla-certdata/share/certs/SwissSign_Silver_CA_-_G2.pem delete external/mpl/mozilla-certdata/share/certs/TeliaSonera_Root_CA_v1.pem delete external/mpl/mozilla-certdata/share/certs/Telia_EC_Email_Root_CA_v3.pem 1.1 external/mpl/mozilla-certdata/share/certs/Telia_EC_TLS_Root_CA_v3.pem 1.1 external/mpl/mozilla-certdata/share/certs/Telia_RSA_Email_Root_CA_v3.pem 1.1 external/mpl/mozilla-certdata/share/certs/Telia_RSA_TLS_Root_CA_v3.pem 1.1 external/mpl/mozilla-certdata/share/certs/TrustAsia_SMIME_ECC_Root_CA.pem 1.1 external/mpl/mozilla-certdata/share/certs/TrustAsia_SMIME_RSA_Root_CA.pem 1.1 external/mpl/mozilla-certdata/share/certs/TrustAsia_TLS_ECC_Root_CA.pem 1.1 external/mpl/mozilla-certdata/share/certs/TrustAsia_TLS_RSA_Root_CA.pem 1.1 external/mpl/mozilla-certdata/share/certs/Trustwave_Global_Certification_Authority.pem delete external/mpl/mozilla-certdata/share/certs/Trustwave_Global_ECC_P256_Certification_Authority.pem delete external/mpl/mozilla-certdata/share/certs/Trustwave_Global_ECC_P384_Certification_Authority.pem delete external/mpl/mozilla-certdata/share/certs/XRamp_Global_CA_Root.pem delete external/mpl/mozilla-certdata/share/certs/certSIGN_ROOT_CA.pem delete external/mpl/mozilla-certdata/share/certs/e-Szigno_TLS_Root_CA_2023.pem 1.1 external/mpl/mozilla-certdata/share/certs/ePKI_Root_Certification_Authority.pem delete external/mpl/mozilla-certdata/share/certs/emSign_ECC_Root_CA_-_C3.pem delete external/mpl/mozilla-certdata/share/certs/emSign_ECC_Root_CA_-_G3.pem delete external/mpl/mozilla-certdata/share/certs/emSign_Root_CA_-_C1.pem delete external/mpl/mozilla-certdata/share/email.trust 1.4 external/mpl/mozilla-certdata/share/server.trust 1.4 mozilla-certdata: PR 60908: update for compromised CA. [riastradh, ticket #1383] share/man/man3/CMSG_DATA.3 1.4-1.6 cmsg(3): PR 59054: fix some issues in the man page: - Don't use malloc(3) here -- statically sized allocation is fine. - Clarify constancy of CMSG_SPACE/LEN to justify static size. - Handle multiple descriptors -- mandatory because of possible alignment issues in CMSG_LEN. [riastradh, ticket #1368] share/man/man4/unix.4 1.31-1.35 unix(4): PR 32844: fix various issues in man page: - Split walls of prose into itemized lists. - Specify types of options. - Add LOCAL_CONNWAIT, SOL_LOCAL. - Xref cmsg(3). - Fix text about LOCAL_CREDS. - Markup fixes. [riastradh, ticket #1369] sys/kern/sys_futex.c 1.20-1.22 tests/lib/libc/sys/t_futex_ops.c 1.6-1.10 futex(2) [including compat_linux futex(2)]: PR 56828: fix FUTEX_CMP_REQUEUE semantics to correctly match Linux. [riastradh, ticket #1370] lib/libm/src/s_modfl.c 1.2 tests/lib/libm/t_fe_round.c 1.20 tests/lib/libm/t_modf.c 1.6 modfl(3): PR 58237:: fix modfl(3) on ld128 architectures. [riastradh, ticket #1371] bin/df/df.c 1.104 df(1): PR 58718: fix swapped total/free columns in `df -G' [riastradh, ticket #1372] crypto/external/bsd/heimdal/Makefile.rules.inc 1.11 heimdal: PR 58771: fix parallel make includes. [riastradh, ticket #1373] sys/dev/video.c 1.46 video(4): PR 58898: fix race in read to avoid kernel data structure corruption that leads to panic under use by Chromium. [riastradh, ticket #1374] common/lib/libc/string/memmem.c 1.6 memmem(3): PR 58906: avoid undefined behaviour in shift. [riastradh, ticket #1375] share/man/man9/module.9 1.55 module(9): PR 59102: fix signature of module callback function. [riastradh, ticket #1377] external/bsd/nvi/dist/regex/regcomp.c 1.9 vi(1): PR 59103: fix searching for non-ASCII text with `:set extended' [riastradh, ticket #1378] lib/libc/arch/arm/misc/arm_initfini.c 1.8-1.10 libc/arm: PR 59063: avoid malloc in ELF constructors, via sysctlbyname. [riastradh, ticket #1379] distrib/sets/lists/debug/mi 1.466 (patch) distrib/sets/lists/tests/mi 1.1359 (patch) sys/arch/alpha/alpha/machdep.c 1.380 (patch) sys/arch/amd64/amd64/machdep.c 1.372,1.373 (patch) sys/arch/hppa/hppa/machdep.c 1.22 (patch) sys/arch/i386/i386/machdep.c 1.844,1.845 (patch) sys/arch/ia64/ia64/machdep.c 1.46 (patch) sys/arch/m68k/m68k/m68k_machdep.c 1.12 (patch) sys/arch/mips/mips/mips_machdep.c 1.307 (patch) sys/arch/sh3/sh3/sh3_machdep.c 1.114 (patch) sys/arch/vax/vax/trap.c 1.139,1.141 (patch) tests/kernel/Makefile 1.85-1.87 (patch) tests/kernel/arch/aarch64/execregs.c 1.1 (patch) tests/kernel/arch/aarch64/execregs.h 1.1 (patch) tests/kernel/arch/aarch64/h_execregs.S 1.1,1.2 (patch) tests/kernel/arch/hppa/execregs.c 1.1,1.2 (patch) tests/kernel/arch/hppa/execregs.h 1.1,1.2 (patch) tests/kernel/arch/hppa/h_execregs.S 1.1,1.2 (patch) tests/kernel/arch/i386/execregs.c 1.1 (patch) tests/kernel/arch/i386/execregs.h 1.1 (patch) tests/kernel/arch/i386/h_execregs.S 1.1 (patch) tests/kernel/arch/sh3/h_execregs.S 1.1 (patch) tests/kernel/arch/vax/execregs.c 1.1 (patch) tests/kernel/arch/vax/execregs.h 1.1 (patch) tests/kernel/arch/vax/h_execregs.S 1.1 (patch) tests/kernel/arch/x86_64/execregs.c 1.1 (patch) tests/kernel/arch/x86_64/execregs.h 1.1 (patch) tests/kernel/arch/x86_64/h_execregs.S 1.1 (patch) tests/kernel/h_execregs_unimpl.c 1.1 (patch) tests/kernel/t_execregs.c 1.1-1.5 (patch) exec/spawn: PR 59084: don't leak registers to child. [riastradh, ticket #1376] lib/libc/gen/pthread_atfork.c 1.19 pthread_atfork(3): PR 59112: libc, libpthread: use mmap, not malloc. [riastradh, ticket #1380] external/bsd/file/dist/configure.ac 1.24 (patch) external/bsd/file/dist/src/fsmagic.c 1.19 (patch) external/bsd/file/include/config.h 1.22 (patch) lib/libutil/stat_flags.c 1.4,1.5 (patch) tests/dev/fss/t_fss.sh 1.8 (patch) file(1), find(1): PR 60379, PR 60380): recognize snapshots. [riastradh, ticket #1384] lib/libc/gen/arc4random.c 1.39,1.42,1.44-1.50 (patch) lib/libc/include/arc4random.h 1.2-1.4 (patch) sys/kern/kern_entropy.c 1.73 (patch) sys/sys/sysctl.h 1.240 (patch) tests/lib/libc/gen/t_arc4random.c 1.2-1.6 (patch) arc4random(3): PR 59117, PR 59124, PR 59148: eliminate various failure modes to make this more reliable in more contexts, and add more tests. [riastradh, ticket #1381] sys/arch/amd64/amd64/process_machdep.c 1.51 sys/arch/i386/i386/process_machdep.c 1.98 sys/arch/x86/include/dbregs.h 1.9 sys/arch/x86/x86/dbregs.c 1.16 sys/compat/netbsd32/netbsd32_ptrace.c 1.10,1.11 sys/kern/sys_process_lwpstatus.c 1.6-1.10 sys/sys/ptrace.h 1.78 kernel: PR 60556, PR 60595, PR 60658: Fix locking around ptrace and procfs debug register access. [riastradh, ticket #1385] sys/compat/linux32/arch/aarch64/linux32_exec_machdep.c 1.3 sys/compat/netbsd32/netbsd32_signal.c 1.57 sys/kern/exec_script.c 1.86 (patch) sys/kern/exec_subr.c 1.93 (patch) sys/kern/kern_exec.c 1.534,1.535 (patch) sys/kern/kern_fork.c 1.235 exec, fork spawn: PR 60653, PR 60657, PR 60877: Fix process stack base and error branches. [riastradh, ticket #1386] sys/net/if.c 1.539 ioctl(SIOCSIFGENERIC): PR 60745: check for network interface setpriv. [riastradh, ticket #1387] sys/net/if_l2tp.c 1.50,1.51 l2tp(4): PR 60743: block unprivileged config, validate cookie length. [riastradh, ticket #1388] common/lib/libc/arch/x86_64/string/memchr.S 1.7,1.8 (patch) tests/lib/libc/string/t_memchr.c 1.4-1.7 (patch) memchr(3): PR 60744: fix case of arbitrary-length inputs [riastradh, ticket #1389]