NetBSD/src hohsqIe — doc CHANGES-11.1

   Tickets #532 - #537
VersionDeltaFile
1.1.2.25+87-1doc/CHANGES-11.1
+87-11 files

NetBSD/src PClTWoU — doc CHANGES-10.3

   Tickets #1365 - #1367, #1382, #1383
VersionDeltaFile
1.1.2.15+82-1doc/CHANGES-10.3
+82-11 files

NetBSD/src 6LahydF — distrib/sets/lists/base mi

   Pull up following revision(s) (requested by riastradh in ticket #1383):

        external/mpl/mozilla-certdata/share/certs/AffirmTrust_Commercial.pem: file removal
        external/mpl/mozilla-certdata/share/certs/TrustAsia_TLS_ECC_Root_CA.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/OISTE_Server_Root_ECC_G1.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/Trustwave_Global_ECC_P256_Certification_Authority.pem: file removal
        external/mpl/mozilla-certdata/share/certs/FIRMAPROFESIONAL_CA_ROOT-A_WEB.pem: file removal
        external/mpl/mozilla-certdata/share/certs/TeliaSonera_Root_CA_v1.pem: file removal
        external/mpl/mozilla-certdata/share/certs/SwissSign_RSA_SMIME_Root_CA_2022_-_1.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/Entrust_Root_Certification_Authority.pem: file removal
        external/mpl/mozilla-certdata/share/certs/CommScope_Public_Trust_RSA_Root-01.pem: file removal
        external/mpl/mozilla-certdata/share/certs/ePKI_Root_Certification_Authority.pem: file removal
        external/mpl/mozilla-certdata/share/certs/Telia_RSA_TLS_Root_CA_v3.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/TrustAsia_SMIME_RSA_Root_CA.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/GLOBALTRUST_2020.pem: file removal
        external/mpl/mozilla-certdata/share/certs/AffirmTrust_Premium_ECC.pem: file removal
        external/mpl/mozilla-certdata/share/certs/SecureTrust_CA.pem: file removal
        external/mpl/mozilla-certdata/share/certs/OISTE_Server_Root_RSA_G1.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/Trustwave_Global_Certification_Authority.pem: file removal

    [48 lines not shown]
VersionDeltaFile
1.1314.2.14+13-5distrib/sets/lists/base/mi
+13-51 files

NetBSD/src 1zcKlGQ — distrib/sets/lists/base mi, doc 3RDPARTY

   Pull up following revision(s) (requested by riastradh in ticket #1383):

        external/mpl/mozilla-certdata/share/certs/AffirmTrust_Commercial.pem: file removal
        external/mpl/mozilla-certdata/share/certs/TrustAsia_TLS_ECC_Root_CA.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/OISTE_Server_Root_ECC_G1.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/Trustwave_Global_ECC_P256_Certification_Authority.pem: file removal
        external/mpl/mozilla-certdata/share/certs/FIRMAPROFESIONAL_CA_ROOT-A_WEB.pem: file removal
        external/mpl/mozilla-certdata/share/certs/TeliaSonera_Root_CA_v1.pem: file removal
        external/mpl/mozilla-certdata/share/certs/SwissSign_RSA_SMIME_Root_CA_2022_-_1.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/Entrust_Root_Certification_Authority.pem: file removal
        external/mpl/mozilla-certdata/share/certs/CommScope_Public_Trust_RSA_Root-01.pem: file removal
        external/mpl/mozilla-certdata/share/certs/ePKI_Root_Certification_Authority.pem: file removal
        external/mpl/mozilla-certdata/share/certs/Telia_RSA_TLS_Root_CA_v3.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/TrustAsia_SMIME_RSA_Root_CA.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/GLOBALTRUST_2020.pem: file removal
        external/mpl/mozilla-certdata/share/certs/AffirmTrust_Premium_ECC.pem: file removal
        external/mpl/mozilla-certdata/share/certs/SecureTrust_CA.pem: file removal
        external/mpl/mozilla-certdata/share/certs/OISTE_Server_Root_RSA_G1.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/Trustwave_Global_Certification_Authority.pem: file removal

    [48 lines not shown]
VersionDeltaFile
1.1314.2.13+135-101distrib/sets/lists/base/mi
1.1905.2.21+4-4doc/3RDPARTY
+139-1052 files

NetBSD/src U1AOLjx — distrib/sets/lists/base mi, doc 3RDPARTY

   Pull up following revision(s) (requested by riastradh in ticket #537):

        external/mpl/mozilla-certdata/share/certs/AffirmTrust_Commercial.pem: file removal
        external/mpl/mozilla-certdata/share/certs/TrustAsia_TLS_ECC_Root_CA.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/OISTE_Server_Root_ECC_G1.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/Trustwave_Global_ECC_P256_Certification_Authority.pem: file removal
        external/mpl/mozilla-certdata/share/certs/FIRMAPROFESIONAL_CA_ROOT-A_WEB.pem: file removal
        external/mpl/mozilla-certdata/share/certs/TeliaSonera_Root_CA_v1.pem: file removal
        external/mpl/mozilla-certdata/share/certs/SwissSign_RSA_SMIME_Root_CA_2022_-_1.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/Entrust_Root_Certification_Authority.pem: file removal
        external/mpl/mozilla-certdata/share/certs/CommScope_Public_Trust_RSA_Root-01.pem: file removal
        external/mpl/mozilla-certdata/share/certs/ePKI_Root_Certification_Authority.pem: file removal
        external/mpl/mozilla-certdata/share/certs/Telia_RSA_TLS_Root_CA_v3.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/TrustAsia_SMIME_RSA_Root_CA.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/GLOBALTRUST_2020.pem: file removal
        external/mpl/mozilla-certdata/share/certs/AffirmTrust_Premium_ECC.pem: file removal
        external/mpl/mozilla-certdata/share/certs/SecureTrust_CA.pem: file removal
        external/mpl/mozilla-certdata/share/certs/OISTE_Server_Root_RSA_G1.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/Trustwave_Global_Certification_Authority.pem: file removal

    [48 lines not shown]
VersionDeltaFile
1.1367.2.3+147-105distrib/sets/lists/base/mi
1.2126.2.18+4-4doc/3RDPARTY
+151-1092 files

NetBSD/src WqCD349 — external/bsd/fetch/dist/libfetch common.c

   Pull up following revision(s) (requested by riastradh in ticket #1382):

        external/bsd/fetch/dist/libfetch/common.c: revision 1.14

   libfetch: Fix missing SSL_set1_host call.

   PR lib/60878: libfetch: missing SSL_set1_host call
VersionDeltaFile
1.2.54.4+2-1external/bsd/fetch/dist/libfetch/common.c
+2-11 files

NetBSD/src YFwlGti — external/bsd/fetch/dist/libfetch common.c

   Pull up following revision(s) (requested by riastradh in ticket #536):

        external/bsd/fetch/dist/libfetch/common.c: revision 1.14

   libfetch: Fix missing SSL_set1_host call.

   PR lib/60878: libfetch: missing SSL_set1_host call
VersionDeltaFile
1.7.4.1+2-1external/bsd/fetch/dist/libfetch/common.c
+2-11 files

NetBSD/src ws6wjGc — tests/lib/libc/gen t_arc4random.c

   Pull up following revision(s) (requested by riastradh in ticket #535):

        tests/lib/libc/gen/t_arc4random.c: revision 1.6

   t_arc4random: Fix test to guarantee global state initialization.

   Previously, if pthread_atfork failed, arc4random_global_buf would
   fail to initialize the global state as intended.  (There are separate
   tests for intentional failure of global state initialization.)  It is
   unlikely for pthread_atfork to fail, but with RLIMIT_AS cranked down
   to zero, it may.  To ensure that the global state is successfully
   initialized for the tests that are trying to exercise it, call
   arc4random from another thread first before forcing failure of the
   local state initialization.

   PR lib/59117: arc4random has some failure modes it shouldn't
VersionDeltaFile
1.5.2.1+27-2tests/lib/libc/gen/t_arc4random.c
+27-21 files

NetBSD/src BIlwuK5 — distrib/sets/lists/base mi

   Pull up following revision(s) (requested by jnemeth in ticket #1367):

        etc/mtree/NetBSD.dist.base: revision 1.265
        distrib/sets/lists/base/mi: revision 1.1391
        distrib/sets/lists/base/mi: revision 1.1392
        etc/namedb/bind.keys: revision 1.3

   Make namedb subdirectories for non-chroot case.

   Part of fix for PR/52465 and PR/60864

   Update bind.keys from src/external/mpl/dist/bind.keys.
   managed-keys is ancient history and just generated warnings doing
   nothing useful.  The proper keyword to use is trust-anchors and
   this file is now current.  The latest root key is only partially
   specified as it wasn't published at the time this file was updated,
   but enough information is provided for named to download the full
   key using RFC 5011.


    [3 lines not shown]
VersionDeltaFile
1.1314.2.12+4-1distrib/sets/lists/base/mi
+4-11 files

NetBSD/src O32TEbP — distrib/sets/lists/base mi

   Pull up following revision(s) (requested by jnemeth in ticket #534):

        etc/mtree/NetBSD.dist.base: revision 1.265
        distrib/sets/lists/base/mi: revision 1.1391
        distrib/sets/lists/base/mi: revision 1.1392
        etc/namedb/bind.keys: revision 1.3

   Make namedb subdirectories for non-chroot case.

   Part of fix for PR/52465 and PR/60864

   Update bind.keys from src/external/mpl/dist/bind.keys.
   managed-keys is ancient history and just generated warnings doing
   nothing useful.  The proper keyword to use is trust-anchors and
   this file is now current.  The latest root key is only partially
   specified as it wasn't published at the time this file was updated,
   but enough information is provided for named to download the full
   key using RFC 5011.


    [3 lines not shown]
VersionDeltaFile
1.1367.2.2+4-1distrib/sets/lists/base/mi
+4-11 files

NetBSD/src 2n6QInI — tools/gmp Makefile

   Pull up following revision(s) (requested by tls in ticket #1366):

        tools/gmp/Makefile: revision 1.7

   Fix compiler core dumps on MacOS on Apple Silicon (PR toolchain/60904),
   by disabling the use of the broken arm64 asm that comes with the present
   version of GMP (we can re-enable it when we upgrade).
VersionDeltaFile
1.5.2.2+10-1tools/gmp/Makefile
+10-11 files

NetBSD/src yrlKVWa — tools/gmp Makefile

   Pull up following revision(s) (requested by tls in ticket #533):

        tools/gmp/Makefile: revision 1.7

   Fix compiler core dumps on MacOS on Apple Silicon (PR toolchain/60904),
   by disabling the use of the broken arm64 asm that comes with the present
   version of GMP (we can re-enable it when we upgrade).
VersionDeltaFile
1.6.2.1+10-1tools/gmp/Makefile
+10-11 files

NetBSD/src 4E4ED1j — sys/dev/pci if_vr.c

   Pull up following revision(s) (requested by andvar in ticket #1365):

        sys/dev/pci/if_vr.c: revision 1.140

   vr(4): set or clear VR_RXCFG_RX_PROMISC bit in vr_setmulti().

   Previously the promiscuous bit was only handled in vr_init().
   When an interface is added to or removed from bridge(4), its
   IFF_PROMISC flag is changed through the interface flags (SIOCSIFFLAGS).

   On a running interface it does not reinitialize device, but calls
   vr_setmulti() directly, which did not update the promiscuous bit in RX filter.

   PR port-i386/60884
VersionDeltaFile
1.137.4.2+4-2sys/dev/pci/if_vr.c
+4-21 files

NetBSD/src nzcW2zO — sys/dev/pci if_vr.c

   Pull up following revision(s) (requested by andvar in ticket #532):

        sys/dev/pci/if_vr.c: revision 1.140

   vr(4): set or clear VR_RXCFG_RX_PROMISC bit in vr_setmulti().

   Previously the promiscuous bit was only handled in vr_init().
   When an interface is added to or removed from bridge(4), its
   IFF_PROMISC flag is changed through the interface flags (SIOCSIFFLAGS).

   On a running interface it does not reinitialize device, but calls
   vr_setmulti() directly, which did not update the promiscuous bit in RX filter.

   PR port-i386/60884
VersionDeltaFile
1.138.4.2+4-2sys/dev/pci/if_vr.c
+4-21 files

NetBSD/src lNMdAew — external/bsd/fetch/dist/libfetch common.c

   libfetch: Fix missing SSL_set1_host call.

   PR lib/60878: libfetch: missing SSL_set1_host call
VersionDeltaFile
1.14+2-1external/bsd/fetch/dist/libfetch/common.c
+2-11 files

NetBSD/src s0oxFdN — doc 3RDPARTY, external/mpl/mozilla-certdata/share Makefile

   mozilla-certdata: Update references in Makefile and doc/3RDPARTY.

   PR security/60908: mozilla-certdata: update for compromised CA
VersionDeltaFile
1.2267+4-4doc/3RDPARTY
1.6+3-3external/mpl/mozilla-certdata/share/Makefile
+7-72 files

NetBSD/src pfzwuzN — distrib/sets/lists/base mi

   mozilla-certdata: Update set lists.

   PR security/60908: mozilla-certdata: update for compromised CA
VersionDeltaFile
1.1393+147-105distrib/sets/lists/base/mi
+147-1051 files

NetBSD/src FkVvq9R — external/mpl/mozilla-certdata/share email.trust server.trust, external/mpl/mozilla-certdata/share/certs TrustAsia_TLS_RSA_Root_CA.pem SECOM_SMIME_RSA_Root_CA_2024.pem

   mozilla-certdata: regen
VersionDeltaFile
1.4+12-46external/mpl/mozilla-certdata/share/server.trust
1.4+9-31external/mpl/mozilla-certdata/share/email.trust
1.1+33-0external/mpl/mozilla-certdata/share/certs/SECOM_SMIME_RSA_Root_CA_2024.pem
1.1+33-0external/mpl/mozilla-certdata/share/certs/D-TRUST_EV_Root_CA_2_2023.pem
1.1+33-0external/mpl/mozilla-certdata/share/certs/D-TRUST_BR_Root_CA_2_2023.pem
1.1+32-0external/mpl/mozilla-certdata/share/certs/TrustAsia_TLS_RSA_Root_CA.pem
+152-7746 files not shown
+557-7752 files

NetBSD/src NfoffEo — external/mpl/mozilla-certdata/dist certdata.txt

   mozilla-certdata: Update Mozilla certdata.txt.

   nss hg date: 2026-10-20
   nss hg revision: 26d38a0c3fb81e7fb2acedbaf4c42dd21dce0517

   PR security/60908: mozilla-certdata: update for compromised CA
VersionDeltaFile
1.1.1.4+3,260-4,276external/mpl/mozilla-certdata/dist/certdata.txt
+3,260-4,2761 files

NetBSD/src 3kbZZVE — tests/lib/libc/gen t_arc4random.c

   t_arc4random: Fix test to guarantee global state initialization.

   Previously, if pthread_atfork failed, arc4random_global_buf would
   fail to initialize the global state as intended.  (There are separate
   tests for intentional failure of global state initialization.)  It is
   unlikely for pthread_atfork to fail, but with RLIMIT_AS cranked down
   to zero, it may.  To ensure that the global state is successfully
   initialized for the tests that are trying to exercise it, call
   arc4random from another thread first before forcing failure of the
   local state initialization.

   PR lib/59117: arc4random has some failure modes it shouldn't
VersionDeltaFile
1.6+27-2tests/lib/libc/gen/t_arc4random.c
+27-21 files

NetBSD/src E3SEyBz — sys/external/bsd/drm2/dist/drm/i915/gt intel_ggtt.c

   i915: Fix partial page view indexing error.

   PR kern/60907: i915: partial page view indexing error
VersionDeltaFile
1.20+7-3sys/external/bsd/drm2/dist/drm/i915/gt/intel_ggtt.c
+7-31 files

NetBSD/src YIuB5ZX — sys/dev/pci r128fb.c

   match Rage 128 VR AGP
   from Sam van Kampen, thanks!
VersionDeltaFile
1.47+3-2sys/dev/pci/r128fb.c
+3-21 files

NetBSD/src 5xoM9sG — sys/arch/riscv/riscv netbsd32_machdep.c

   risc-v: fix register copy loops in cpu_[gs]etmcontext32
VersionDeltaFile
1.7+4-6sys/arch/riscv/riscv/netbsd32_machdep.c
+4-61 files

NetBSD/src LocPmf9 — sys/arch/riscv/riscv core_machdep.c

   riscv: fix register copy loop in cpu_coredump
VersionDeltaFile
1.7+3-3sys/arch/riscv/riscv/core_machdep.c
+3-31 files

NetBSD/src pms8QaD — external/gpl3/gcc/lib Makefile.inc, external/gpl3/gcc/lib/crtstuff Makefile

   fix the m68ksf build.

   avoid using bare ${MACHINE_ARCH} when referring to subdirs that
   mknative-gcc creates, and avoid overwriting ${GCC_MACHINE_ARCH}
   if it is already set.

   fix a test in libgomp, and explain why it exists.
VersionDeltaFile
1.16+4-4external/gpl3/gcc/lib/crtstuff/Makefile
1.30+5-2external/gpl3/gcc/lib/libgomp/Makefile
1.86+2-2external/gpl3/gcc/usr.bin/backend/Makefile
1.15+2-2external/gpl3/gcc/lib/liblto_plugin/Makefile
1.5+2-2external/gpl3/gcc/lib/Makefile.inc
+15-125 files

NetBSD/src KSFvckN — sys/dev/raidframe rf_compat80.c rf_compat50.c

   maxOutstadingDiskReqs was already used like a uint8_t; make it one.
   Shuts up Clang, though Clang was actually right to complain in this case.
VersionDeltaFile
1.18+2-2sys/dev/raidframe/rf_compat80.c
1.14+2-2sys/dev/raidframe/rf_compat50.c
1.10+2-2sys/dev/raidframe/rf_compat32.c
1.25+2-2sys/dev/raidframe/raidframevar.h
+8-84 files

NetBSD/src 8k3jtiG — sys/arch/sparc64/dev vbus.c

   sun4v: improve error logging in vbus
VersionDeltaFile
1.11+11-7sys/arch/sparc64/dev/vbus.c
+11-71 files

NetBSD/src TTmpIFz — sys/arch/sparc64/dev cbus.c

   sun4v: improve error logging i cbus
VersionDeltaFile
1.10+10-6sys/arch/sparc64/dev/cbus.c
+10-61 files

NetBSD/src H3azXrJ — sys/arch/sparc64/sparc64 autoconf.c

   sun4v: Try to use the hypervisor interrupt api version 1 if version 2 fails.

   Version 3 systems are working ok - trying to fix the setup when a version < 2
   system is used.

   Not tested on yet.
VersionDeltaFile
1.257+10-4sys/arch/sparc64/sparc64/autoconf.c
+10-41 files

NetBSD/src UDblXCt — sys/kern exec_elf.c, sys/sys exec_elf.h

   exec_elf: Nix diagnostic messages for all (unknown) fd.o notes.

   Same as for unknown GNU notes.  Shaves off a tiny bit of code in
   non-DIAGNOSTIC builds, saves us some trouble when fd.o invariably
   adds more metadata not relevant to execution semantics.

   PR kern/60901: Unknown elf note type 1081871370
VersionDeltaFile
1.109+7-6sys/kern/exec_elf.c
1.188+8-5sys/sys/exec_elf.h
+15-112 files