Announcing NetBSD 1.6.1

                   =======================
The NetBSD Project is pleased to announce that release 1.6.1 of the

NetBSD Operating System is now available.
NetBSD 1.6.1 is a maintenance release for users of NetBSD 1.6

which provides the following updates relative to 1.6:
    * A number of security issues have been fixed.

    * Some performance fixes have been incorporated.

    * Improved device support in some existing drivers.

    * Some new device drivers have been added.

    * The evbsh3 port has been added to the binary distribution.

    * Some minor userland fixes have been applied.
The NetBSD 1.6.1 distribution consists of the full NetBSD source,

binary releases for 40 ports including the X Window System, and the

NetBSD Packages Collection 1.6.1 release.
Complete source and binaries are available at many sites around the

world. A list of download sites via FTP, AnonCVS, SUP, and other

methods may be found at:                                                       
	http://www.NetBSD.org/mirrors/
For further information about NetBSD 1.6.1, supported architectures,

changes between NetBSD 1.6 and 1.6.1, and how to obtain NetBSD is

available in the full release announcement which may be found at:
	http://www.NetBSD.org/Releases/formal-1.6/NetBSD-1.6.1.html
Acknowledgments

===============
The NetBSD Foundation would like to thank all those who have

contributed code, hardware, documentation, funds, colocation for

our servers, web pages and other documentation, release engineering,

and other resources over the years.  More information on contributors

is available at:
        http://www.NetBSD.org/contrib/
We would like to especially thank the University of California at

Berkeley and the GNU Project for particularly large subsets of code

that we use, and the Internet Software Consortium, Redback Networks

and the Helsinki University of Technology for current colocation

services.

[For a complete list of changes, please refer to my mail to the

current-users mailing list - agc]
Summary of Changes to the NetBSD Packages Collection in September 2003

======================================================================
By my calculations, at the end of September 2003, there were 4147 packages

in the NetBSD Packages Collection, up from 4039 the previous month, a

rise of 108.
Notable additions include:  3ddesktop, arnold, bbdb, bc, catdoc-tk,

coalesce, darwin_lib, dega, devhelp, dgen, digger, enchant,

exim-exiscan, fix-mime-charset, fluctuate, focal81, fondu, foobillard,

fuse, fuse-utils, geda-examples, genesplicer, gftp-gtk1, glimmer,

gnome-themes, gnome2-user-docs, gossip, gp, gtk-thinice-engine,

gtksourceview, gtranslator, hmmer, idesk, ispell-polski, jchkmail,

kde3-i18n-hr, kde3-i18n-is, kde3-i18n-mk, kde3-i18n-se, kde3-i18n-ss,

libcroco, liboop, libspectrum, libxfce4gui, libxfce4mcs, libxfce4util,

loudmouth, maradns, menu2wm, mp3splt, msmtp, mummer, nabi, nicotine,

p5-Authen-SASL, p5-Authen-SASL-Cyrus, p5-Compress-Bzip2,

p5-Image-Imlib2, p5-Module-Build, p5-Net-Gnats, p5-Net-Jabber,

p5-Net-Telnet-Cisco, p5-RADIUS, p5-Set-IntSpan, p5-Unicode-String,

p5-XML-Stream, pdbalign, php4-exif, php4-openssl, pixieplus, profit,

py-gnome2, py-PgSQL, py-SimpleParse, py-TPG, pygopherd, render,

resize_image, rocksndiamonds-sdl, ruby-DBD-mysql, ruby-gsl,

ruby-vapor, sewer, skk, sma, stride, sylpheed-gtk2, trickle,

udfclient, windowlab, xbindkeys-tk, xfce4, xfce4-artwork,

xfce4-desktop, xfce4-fm, xfce4-fm-icons, xfce4-gtk2-engines,

xfce4-iconbox, xfce4-mcs-manager, xfce4-mcs-plugins,

xfce4-minicmd-plugin, xfce4-mixer, xfce4-netload-plugin, xfce4-panel,

xfce4-print, xfce4-showdesktop-plugin, xfce4-systemload-plugin,

xfce4-systray, xfce4-themes, xfce4-toys, xfce4-trigger-launcher,

xfce4-utils, xfce4-wm, xfce4-wm-themes, xpad, xslide, and yelp.
Notable updates include:  abcde, abook, aiksaurus, angband-x11,

ap-auth-postgresql, ap2-subversion, apache-ant, apache6, apel, ar...
[ message continues ]

NetBSD Quarterly Status Report - 2003Q1
[Quarterly Status Reports]
NetBSD is an actively developed operating system.  With binary support

of over 40 architectures in our last official release (NetBSD 1.6.2),

our widely portable Packages Collection and large userbase there is a

lot going on within the project.  In order to provide a summary of

the most important changes over the last few months, we have decided

to follow the example of other projects of releasing official status

reports on a regular basis.
These status reports will be released on a quarterly basis, providing

an overview over the last three months within the NetBSD Project.

They are suitable for reproduction and publication in part or in whole

as long as the source is clearly indicated.
-Jan Schaumann <jschauma@NetBSD.org>
=3D=3D=3D=3D
January - March 2004:
The NetBSD Project has had some very active months in this year's first

quarter.  The year started off with the introduction of the

``pkgviews'' framework into pkgsrc and the start of our new Logo

contest, followed by the annual meeting of the NetBSD developers, the

release of NetBSD 1.6.2 and finally the start of the release

engineering process of NetBSD 2.0.
The first quarter of 2004 within NetBSD in details:
Administrative:

	- NetBSD Logo Design Contest announced [20040113]

	- New Developers [20040201]

	- Annual meeting [20040207]

	- TNF 501(c)(3) non-profit [20040210]
pkgsrc:

	- pkgsrc gets experimental ``pkgviews''	[20040106]

	- First PkgsrcCon announced [20040309]

	- Interix (Windows) support added to pkgsrc [20040312]

	- pkgsrc becomes self-hosted [20040312]

	- New pkgsrc-2004Q1 branch [20040329]
Ports:

	- sgimips: IP20 (Indigo) and IP2[24] X support in-tree

	- sh3 ports switch to gcc3 [20040224]

	- sparc: JavaStation snapshots [20040106]

	- xen: New NetBSD/xen port [20040311]
Security:

	- Four Security Advisories released [20040218]

	- IPFilter updated to 4.1.1 [20040328]
Technical:

	- Intermittent ffs compatibi...
[ message continues ]

[For a complete list of changes, please refer to the mail on the

tech-pkg mailing list - agc]
Summary of Changes to the Packages Collection in November 2005

==============================================================
By my calculations, at the end of November 2005, there were 5737

packages in the Packages Collection, up from 5657 the previous month,

a rise of 80.
Notable additions include:  audio/cplay, audio/gtick, audio/libmpd,

audio/tcd, biology/azara, cad/cgi-wcalc, cad/gtk1-wcalc,

cad/gtk2-wcalc, cad/mex-wcalc, cad/oct-wcalc, cad/sci-wcalc,

cad/stdio-wcalc, cad/wcalc, cad/wcalc-docs, chat/gaim-icb, chat/iip,

chat/unrealircd, comms/asterisk-sounds-de-x9media, converters/convmv,

databases/p5-Data-Table, databases/p5-DBIx-Abstract,

databases/p5-DBIx-DBSchema, databases/p5-DBIx-Schema,

databases/p5-qdbm, databases/py-mssql, databases/qdbm-cgi,

databases/qdbm-plus, databases/ruby-qdbm, devel/p5-capitalization,

devel/p5-Curses-UI, devel/p5-Curses-UI-POE, devel/p5-Params-Util,

devel/p5-Sort-Versions, devel/p5-Term-Size, devel/p5-Test-Deep,

devel/p5-Test-LongString, devel/p5-Test-Manifest,

devel/p5-Test-NoWarnings, devel/p5-Test-Tester, devel/tre, devel/uno,

emulators/vmips, fonts/tex-uhc-fonts-base, fonts/tex-uhc-fonts-extra,

fonts/tex-unttf, games/4stAttack, games/gtklevel9, geography/geos,

graphics/Coin, graphics/exiftool, graphics/f4l, graphics/gqview-devel,

graphics/lprof, mail/esmtp, mail/mpop, mail/squirrelmail-decode,

math/R-abind, math/R-CGIwithR, math/R-chron, math/R-clim.pact,

math/R-DAAG, math/R-date, math/R-genetics, math/R-geoR, math/R-GRASS,

math/R-gstat, math/R-httpRequest, math/R-hwde, math/R-ISwR,

math/R-lmm, math/R-mapproj, math/R-maps, math/R-Matrix,

math/R-PHYLOGR, math/R-pixmap, math/R-R2HTML, math/R-RArcInfo,

math/R-Rcmdr, math/R-sgeostat, math/R-shapefiles, math/R-statmod,

math/R-VR, math/R-wle, meta-pkgs/pkgsrc-guide-tools, misc/esniper,

multimedia/ming, multimedia/php-ming, multimedia/py-ming,

multimedia/ruby-ming, net/netpipes, net/nload, net/nstx...
[ message continues ]

As of today I will be taking over the responsibility of portmaster for

the ofppc port.  I would like to thank the previous portmaster, Wolfgang

Solfrank for his excellent work in what was the original port of NetBSD to the

PowerPC.
As for the future direction of NetBSD/ofppc, the goal is for this port to run

on as many OpenFirmware and CHRP based PowerPC machines as possible.  Currently

the port is working on the Pegasos II.  Work is in-progress to port it to other

machines, such as CHRP-based IBM RS/6000's and the EFIKA.
---

Tim Rightnour <root@garbled.net>

NetBSD: Free multi-architecture OS http://www.netbsd.org/

-----BEGIN PGP SIGNED MESSAGE-----
		 NetBSD Security Advisory 2002-009

		 =================================

		 (updated 2002/9/16)
Topic:		Multiple vulnerabilities in OpenSSL code
Version:	NetBSD-current:	 source prior to August 10, 2002

		NetBSD-1.6 beta: affected

		NetBSD-1.5.3:	 affected

		NetBSD-1.5.2:	 affected

		NetBSD-1.5.1:	 affected

		NetBSD-1.5:	 affected

		NetBSD-1.4.*:	 not applicable

		pkgsrc:		 prior to openssl-0.9.6f
Severity:	Potential for remote root exploit
Fixed:		NetBSD-current:		August 10, 2002

		NetBSD-1.6 branch:	August 11, 2002 (1.6 includes the fix)

		NetBSD-1.5 branch:	August 31, 2002

		pkgsrc:			openssl-0.9.6f (or later)
	NOTE: previous advisory had fixed dates prior to August 10.

	There were errors found in the vendor-supplied fix, therefore

	the fixed dates were modified.  Sorry for the confusion and

	thanks for the patience.
	NOTE: previous revision of advisory suggested that 1.5 branch

	was fixed on August 1, however the fix was found to be

	insufficient.  Therefore, users of 1.5 should apply the fix

	presented in this revised advisory.  Sorry for the confusion

	and thanks for the patience.
Abstract

========
There are multiple vulnerabilities found in openssl 0.9.6e and prior

releases.  There are four remotely-exploitable buffer overruns in SSL2/3

code.  The ASN1 parser can be confused by invalid encodings (SSL/TLS

code affected).
None of these services are enabled by default in NetBSD, however, by

enabling services built with these libraries, a system would become

vulnerable.
- From the OpenSSL advisory:
  "Everyone using OpenSSL 0.9.6d or earlier, or 0.9.7-beta2 or earlier or

  current development snapshots of 0.9.7 to provide SSL or TLS is

  vulnerable, whether client or server. 0.9.6d servers on 32-bit systems

  with SSL 2.0 disabled are not vulnerable."
After the above advisory was published,

  - 0.9.6e was found to be vulnerable, and 0.9.6f was released.

  - 0.9.6f had some build framework errors, and ...
[ message continues ]

On behalf of NetBSD release engineering, I'd like to announce that we

have re-started the process of releasing NetBSD 4.0.  The process was

originally started back in August, with a goal of releasing by right

about now- however, in September and October, we had a huge flurry of

bug-fixing activity, which improved the quality of NetBSD-current a huge

amount (thanks to Elad Efrat for organizing the first two IRC hackathons

which closed hundreds of outstanding Problem Reports).  At the same

time, we realized that if NetBSD 4.0 was to benefit from this work, it

would take a superhuman effort from the entire project to get all these

fixes pulled up to the release branch.  It was clear that it would be

unrealistic to expect that to happen through the normal process.  We

weighed the various options, and decided that our best course of action

was to simply start the branch over once we fixed a couple more issues.
I'm happy to say that yesterday, December 1, we did just that. The

netbsd-4 branch is once again 'open for business', and we're pushing

full steam ahead to release.  Of course, this means a delay from the

original projected release date; we now expect to be able to release

NetBSD 4 in March.
A couple of minor details:  to differentiate the new branch, and new

beta process, we have designated this test as NetBSD 4.0_BETA2.  If you

have source trees from the original netbsd-4 branch, we recommend that

you delete them and check out a fresh copy with the netbsd-4 tag (see

below).  It will be a couple of days until the first test builds of the

new branch are available, but we wanted to get the announcement out as

soon as possible.
You can check the progress and status of the beta at:

http://www.netbsd.org/releng/releng-4.html
HOW YOU CAN HELP

----------------
Please test NetBSD 4.0_BETA2 on your hardware!  A lot of work has

gone into getting us this far, but we don't have access to every piece

of hardware out there.  If you've used previous releases of NetBSD,

please make sur...
[ message continues ]