Overview

NetBSD 11.1 is the first point release of the NetBSD 11 stable branch, primarily focused on security fixes, bug fixes, hardware compatibility, and system stability rather than new features.

The release was expedited to address important security vulnerabilities. netbsd.org

1. Security Improvements

• IPFilter: Fixed a NULL pointer dereference when parsing ICMPv6 packets that could cause denial of service.
• Networking: Corrected an off-by-one bounds-checking error in bsd_decompress().
• HD Audio: Added access checks for /dev/hdaudioX configuration operations.
• OpenSSH: Updated to version 10.6.
• Unbound DNS resolver: Updated to version 1.26.1.
• Brotli: Fixed CVE-2026-111497.
• libXfont2: Updated to 2.0.9, addressing CVE-2026-44950 and CVE-2026-59679.
• Root certificates: Updated Mozilla certificates to address compromised certificate authorities.

2. Kernel and Filesystem Fixes

• FFS: Fixed a memory fault during filesystem snapshot dump and restore operations.
• UVM: Resolved a race condition in the virtual memory page daemon.
• VFS: Reduced excessive console logging during snapshots under heavy load.
• RAIDframe: Fixed an incorrect assertion during RAID reconstruction.
• Linux compatibility: Fixed a kernel panic involving copy_file_range().
• USB Wi-Fi: Fixed kernel panics when hotplugging devices while wpa_supplicant was running.

3. Hardware and Architecture Support

Platform	Key improvements
AMD64 / i386	Fixed panics on newer VIA/Zhaoxin processors
ARM / Raspberry Pi	Improved USB stability and fixed ARMv5 thread-local storage
Alpha	Fixed QEMU boot hangs and kernel stack alignment
SPARC64	Improved hardware sensors, I²C support, and real-time clock support
HPPA	Added eager FPU switching support, enabled for QEMU
MIPS	Fixed QEMU compatibility and undefined-behavior issues
Atari TT030	Fixed kernel boot failures
Sun68k	Fixed SCSI booting with certain PROM versions

Additional driver improvements include:

• Intel ixl(4) network adapter stability fixes.
• SAS3008 RAID controller stability improvements.
• Microsoft Surface Go 3 battery monitoring.
• Reduced boot delays with PCI IDE controllers.

4. Userspace and Build System

• build.sh: Fixed cross-compilation from macOS on Apple Silicon.
• Improved compatibility with modern compilers when building legacy GNU tools.
• Fixed parallel debug-information builds.
• Added checksums for compressed bootable images.
• libc: Corrected printf() thousands separators and positional arguments.
• Dynamic linker: Fixed thread-local storage alignment assertions in debug builds.
• syslogd: Corrected buffering of incomplete kernel log lines.

5. Updated Third-Party Components

Component	NetBSD 11.1 version
OpenSSH	10.6
Unbound	1.26.1
Xorg Server	21.1.25
libX11	1.8.14
libXfont2	2.0.9
libXi	1.8.4
libXpm	3.5.20
libXrender	1.9.13
libXtst	1.2.6

6. Upgrade Instructions

Existing NetBSD installations can be upgraded using either approach:

1. Installation media: Boot a NetBSD 11.1 installation image and select Upgrade.
2. Other update methods: Update the kernel and kernel modules first, reboot, then update userspace.

Installation images and source archives are available through the official NetBSD download directory. Distribution checksums are PGP-signed.

7. Platform Availability

NetBSD 11.1 continues supporting an exceptionally broad range of architectures, including:

• Modern x86-64, ARM64, and RISC-V systems.
• Legacy Alpha, VAX, SPARC, MIPS, PowerPC, and Motorola 68k systems.
• Embedded platforms, classic computers, and selected gaming consoles.
• Xen virtualization environments.

The Itanium (ia64) port is included but is not fully supported or functional.

Key Takeaways

• Security-first maintenance release: Addresses several vulnerabilities, including networking and third-party library issues.
• Improved reliability: Fixes filesystem, RAID, virtual memory, networking, and driver problems.
• Broad hardware compatibility: Includes improvements for both modern and legacy architectures.
• Updated software: Incorporates newer OpenSSH, Unbound, Xorg, and X11 components.
• Recommended upgrade: Particularly relevant for NetBSD 11.0 users seeking security fixes and improved stability.

Source: Official NetBSD 11.1 Release Announcement — November 2, 2026.