The NetBSD project is pleased to (finally) announce the
NetBSD 11.0 release!
See the release announcement for details.
If you want to test 11.0 please check the installation notes for your architecture and download the preferred
install image from the CDN. If you are using an ARM based device, obtain a netbsd-11 image pre-configured with U-Boot from the bootable ARM images page.
If you have any issues with installation or run into issues with the system during use, please contact us on one of the
mailing lists or file a problem report.
Important note about open security issues:
As you are probably aware, the number of security issues found or suspected everywhere has massively increased with the advent of AI tools. As a consequence, we can’t publish a release without open issues. Instead of delaying the release further to fix them (new ones are being reported all the time), we’ve instead chosen to be transparent about this.
This release has been quite delayed already, since we’ve waited for third-party components to make stable releases so we can get the fixes. We have avoided publishing any change without making a release candidate to give users time to test it. Our release process has been streamlined and automated as far as possible, but besides the time required to build and generate checksums for every platform, manual intervention is still required (e.g. security officer signing the release hashes). The overall process is still limited by the slowest step – the time it takes to transfer every file for every architecture over the network.
The open security related pullup requests (and associated gnats problem reports) are:
hdaudio(4): Apply access checks to ioctl commands, PR 60492; missing local user privilege check, easy manual workaround (remove /dev/hdaudio*; audio will still be functional).
ipfilter: Fix remotely triggerable null pointer deref, PR 60484; IPF is not included in any released kernel by default.
pf: Fix use-after-free in fragment reassembly, PR 60485; PF is deprecated and not included in any released kernel by default.
All the open pullup requests will be committed to the stable branch shortly after the 11.0 release, and become part of the upcoming 11.1 release. We are currently aiming to release 11.1 within the next two months.
Posted by
Jay
on August 01, 2026 at 06:10 PM UTC
#
Posted by
Hossein
on August 01, 2026 at 06:36 PM UTC
#