NetBSD 11.0 released!

The NetBSD project is pleased to (finally) announce the NetBSD 11.0 release!
See the release announcement for details.

If you want to try out 11.0 please check the installation notes for your architecture and download the preferred install image from the CDN. If you are using an ARM based device, obtain a netbsd-11 image pre-configured with U-Boot from the bootable ARM images page.

Please note that the various ISO images have been split into separate <700MB images for CD-ROM media and full-sized DVD images. If you are not restricted by the size limits of a CD-ROM, make sure to pick the image with "-dvd.iso" in the name. If you are using flash-based media (e.g. a USB drive), you must use the .img files rather than the .iso images. Note that they need to be decompressed first, e.g. with gunzip or 7-Zip.

If you have any issues with installation or run into issues with the system during use, please contact us on one of the mailing lists or file a problem report.

Important note about open security issues:

As you are probably aware, the number of security issues found or suspected everywhere has massively increased with the advent of AI tools. As a consequence, we can't publish a release without open issues. Instead of delaying the release further to fix them (new ones are being reported all the time), we've instead chosen to be transparent about this.

This release has been quite delayed already, since we've waited for third-party components to make stable releases so we can get the fixes. We have avoided publishing any change without making a release candidate to give users time to test it. Our release process has been streamlined and automated as far as possible, but besides the time required to build and generate checksums for every platform, manual intervention is still required (e.g. security officer signing the release hashes). The overall process is still limited by the slowest step - the time it takes to transfer every file for every architecture over the network.

The open security related pullup requests (and associated gnats problem reports) are:

• hdaudio(4): Apply access checks to ioctl commands, PR 60492; missing local user privilege check, easy manual workaround (remove /dev/hdaudio*; audio will still be functional).
• ipfilter: Fix remotely triggerable null pointer deref, PR 60484; IPF is not included in any released kernel by default.
• pf: Fix use-after-free in fragment reassembly, PR 60485; PF is deprecated and not included in any released kernel by default.

All the open pullup requests will be committed to the stable branch shortly after the 11.0 release, and become part of the upcoming 11.1 release. We are currently aiming to release 11.1 within the next two months.