NetBSD 11.0

NetBSD 11.0 released! August 01, 2026 posted by Martin Husemann NetBSD 11.0 正式发布！2026 年 8 月 1 日，由 Martin Husemann 发布

The NetBSD project is pleased to (finally) announce the NetBSD 11.0 release! See the release announcement for details. If you want to try out 11.0 please check the installation notes for your architecture and download the preferred install image from the CDN. NetBSD 项目很高兴（终于）宣布 NetBSD 11.0 正式发布！详情请参阅发布公告。如果您想尝试 11.0 版本，请查看您对应架构的安装说明，并从 CDN 下载首选的安装镜像。

If you are using an ARM based device, obtain a netbsd-11 image pre-configured with U-Boot from the bootable ARM images page. Please note that the various ISO images have been split into separate <700MB images for CD-ROM media and full-sized DVD images. If you are not restricted by the size limits of a CD-ROM, make sure to pick the image with “-dvd.iso” in the name. 如果您使用的是基于 ARM 的设备，请从可启动 ARM 镜像页面获取预配置了 U-Boot 的 netbsd-11 镜像。请注意，各种 ISO 镜像已拆分为适用于 CD-ROM 介质的 <700MB 镜像和全尺寸 DVD 镜像。如果您不受 CD-ROM 容量限制，请务必选择名称中带有“-dvd.iso”的镜像。

If you are using flash-based media (e.g. a USB drive), you must use the .img files rather than the .iso images. Note that they need to be decompressed first, e.g. with gunzip or 7-Zip. If you have any issues with installation or run into issues with the system during use, please contact us on one of the mailing lists or file a problem report. 如果您使用的是闪存介质（例如 USB 驱动器），则必须使用 .img 文件而不是 .iso 镜像。请注意，这些文件需要先解压，例如使用 gunzip 或 7-Zip。如果您在安装过程中遇到任何问题，或在使用系统时遇到故障，请通过邮件列表联系我们或提交问题报告。

Important note about open security issues: As you are probably aware, the number of security issues found or suspected everywhere has massively increased with the advent of AI tools. As a consequence, we can’t publish a release without open issues. Instead of delaying the release further to fix them (new ones are being reported all the time), we’ve instead chosen to be transparent about this. 关于未决安全问题的特别说明：正如您可能了解到的，随着 AI 工具的出现，各地发现或怀疑的安全问题数量大幅增加。因此，我们无法在没有任何未决问题的情况下发布版本。为了避免因修复这些问题而进一步推迟发布（因为新的问题一直在被报告），我们选择对此保持透明。

This release has been quite delayed already, since we’ve waited for third-party components to make stable releases so we can get the fixes. We have avoided publishing any change without making a release candidate to give users time to test it. Our release process has been streamlined and automated as far as possible, but besides the time required to build and generate checksums for every platform, manual intervention is still required (e.g. security officer signing the release hashes). The overall process is still limited by the slowest step - the time it takes to transfer every file for every architecture over the network. 本次发布已经相当滞后，因为我们一直在等待第三方组件发布稳定版本以便获取修复程序。我们避免在未发布候选版本的情况下发布任何更改，以确保用户有时间进行测试。我们的发布流程已尽可能精简和自动化，但除了为每个平台构建和生成校验和所需的时间外，仍需要人工干预（例如由安全官签署发布哈希值）。整个过程仍然受限于最慢的步骤——即通过网络传输每个架构的所有文件所需的时间。

The open security related pullup requests (and associated gnats problem reports) are: 与安全相关的未决 pullup 请求（及关联的 gnats 问题报告）如下：

hdaudio(4): Apply access checks to ioctl commands, PR 60492; missing local user privilege check, easy manual workaround (remove /dev/hdaudio*; audio will still be functional). hdaudio(4): 对 ioctl 命令应用访问检查，PR 60492；缺少本地用户权限检查，有简单的手动解决方法（删除 /dev/hdaudio*；音频功能仍可正常使用）。
ipfilter: Fix remotely triggerable null pointer deref, PR 60484; IPF is not included in any released kernel by default. ipfilter: 修复可远程触发的空指针解引用，PR 60484；IPF 默认不包含在任何已发布的内核中。
pf: Fix use-after-free in fragment reassembly, PR 60485; PF is deprecated and not included in any released kernel by default. pf: 修复分片重组中的释放后使用（use-after-free）漏洞，PR 60485；PF 已被弃用，默认不包含在任何已发布的内核中。

All the open pullup requests will be committed to the stable branch shortly after the 11.0 release, and become part of the upcoming 11.1 release. We are currently aiming to release 11.1 within the next two months. 所有未决的 pullup 请求将在 11.0 发布后不久提交到稳定分支，并成为即将发布的 11.1 版本的一部分。我们目前计划在未来两个月内发布 11.1 版本。