NetBSD 11.0 released!
August 01, 2026 posted by Martin Husemann
The NetBSD project is pleased to (finally) announce the
NetBSD 11.0 release!
See the release announcement for details.
Please note that the various ISO images have been split into 700MB images for CD-ROM media and full-sized DVD images. If you are not restricted by the size limits of a CD-ROM, make sure to pick the image with "-dvd.iso" in the name. If you are using flash-based media (e.g. a USB drive), please use the .img files rather than the .iso images.
If you want to test 11.0 please check the installation notes for your architecture and download the preferred install image from the CDN. If you are using an ARM based device, obtain a netbsd-11 image pre-configured with U-Boot from the bootable ARM images page.
If you have any issues with installation or run into issues with the system during use, please contact us on one of the mailing lists or file a problem report.
Important note about open security issues:
As you are probably aware, the number of security issues found or suspected everywhere has massively increased with the advent of AI tools. As a consequence, we can't publish a release without open issues. Instead of delaying the release further to fix them (new ones are being reported all the time), we've instead chosen to be transparent about this.
This release has been quite delayed already, since we've waited for third-party components to make stable releases so we can get the fixes. We have avoided publishing any change without making a release candidate to give users time to test it. Our release process has been streamlined and automated as far as possible, but besides the time required to build and generate checksums for every platform, manual intervention is still required (e.g. security officer signing the release hashes). The overall process is still limited by the slowest step - the time it takes to transfer every file for every architecture over the network.
The open security related pullup requests (and associated gnats problem reports) are:
- hdaudio(4): Apply access checks to ioctl commands, PR 60492; missing local user privilege check, easy manual workaround (remove /dev/hdaudio*; audio will still be functional).
- ipfilter: Fix remotely triggerable null pointer deref, PR 60484; IPF is not included in any released kernel by default.
- pf: Fix use-after-free in fragment reassembly, PR 60485; PF is deprecated and not included in any released kernel by default.
All the open pullup requests will be committed to the stable branch shortly after the 11.0 release, and become part of the upcoming 11.1 release. We are currently aiming to release 11.1 within the next two months.
0 Comments
Log in to join the conversation.No comments yet. Be the first to share your thoughts.