The NetBSD foundation has announced the release of NetBSD 7.1.2, the second security update in NetBSD 7.1.x series. This release brings various security fixes and other stability related patches.

NetBSD banner

What is NetBSD?

NetBSD is UNIX like operating system developed by the collaborative effort of a large group of people. It also includes a variety of other free software like 4.4BSD Lite2 developed at UC Berkeley.

NetBSD implements several standard APIs and network protocols which makes it interoperable with other systems. One of the founding principles of NetBSD is to be highly portable. Towards this goal, the project has been ported to a wide range of platforms.

You can find more details on NetBSD in our gallery.

What changed between NetBSD 7.1.1 and 7.1.2?

NetBSD 7.1.2 is a bug fix cum stability improvement update in 7.1.x series. Citing from NetBSD 7.1.2 release announcement published on project’s website, following are some of the issues fixed in this release.

  • Fixed Remote DoS in IPsec (IPv6) and remote memory corruption in IPv6
  • Disable compat_svr4 and compat_svr4_32 by default on all ports.
  • Disable compat_ibcs2 everywhere but on Vax.
  • Remove svr4/svr4_32/ibcs2/freebsd from the module autoload list.
  • Disable LSRR (loose source and record route) and SSRR (strict source and record route) by default.
  • amd64: Make the direct map non-executable.
  • BIND: update bind.keys.
  • bozohttpd(8): Fix issue where bozohttpd would fail to exec scripts via the -C mechanism.
  • drm2: Fix issues preventing the use of more than one graphics device.
  • Fix detection of duplicate symbols in kernel modules.
  • ipfilter: Fix a kernel panic when altering the ipf state table size at runtime.
  • IPsec:
    • Fix a couple use-after-free issues.
    • Fix IPv6-IPsec-AH tunnels.
    • Fix inverted logic that could crash the kernel.
    • Fix out-of-bounds read.
    • Strengthen sanity checks (AH/ESP).
  • IPv6:
    • Kick nested IPv6 fragments.
    • Fix a couple use-after-free issues.
    • Fix memory leak in nd6_na_input().
  • ksh: Create HISTFILE with mode 0600, not 777.
  • MPLS: Fix several memory corruptions and inconsistencies.
  • pf: Fix signedness bug.
  • sparc:
    • Fix time goes backward problems.
    • Fix problem using the ps command in ddb.
  • tlp(4): Fix timeout using the Legacy Network Adapter in Microsoft Windows Server Hyper-V VMs.
  • ypserv(8): Avoid returning stale request data to the client.
  • Xen: Prevent unrestricted userland access to I/O ports.

Download NetBSD 7.1.2

Being a popular project, NetBSD 7.1.2 is hosted in several locations. You can find these servers in NetBSD mirror listing page. Alternatively, you can choose a bit torrent file from NetBSD torrent listing page. When downloading, please make sure that you are downloading an image compatible with your system.