Overview
NetBSD 11.1 is the first point release of the NetBSD 11 stable branch, primarily focused on security fixes, bug fixes, hardware compatibility, and system stability rather than new features.
The release was expedited to address important security vulnerabilities. netbsd.org
1. Security Improvements
- IPFilter: Fixed a NULL pointer dereference when parsing ICMPv6 packets that could cause denial of service.
- Networking: Corrected an off-by-one bounds-checking error in
bsd_decompress(). - HD Audio: Added access checks for
/dev/hdaudioXconfiguration operations. - OpenSSH: Updated to version 10.6.
- Unbound DNS resolver: Updated to version 1.26.1.
- Brotli: Fixed CVE-2026-111497.
- libXfont2: Updated to 2.0.9, addressing CVE-2026-44950 and CVE-2026-59679.
- Root certificates: Updated Mozilla certificates to address compromised certificate authorities.
2. Kernel and Filesystem Fixes
- FFS: Fixed a memory fault during filesystem snapshot dump and restore operations.
- UVM: Resolved a race condition in the virtual memory page daemon.
- VFS: Reduced excessive console logging during snapshots under heavy load.
- RAIDframe: Fixed an incorrect assertion during RAID reconstruction.
- Linux compatibility: Fixed a kernel panic involving
copy_file_range(). - USB Wi-Fi: Fixed kernel panics when hotplugging devices while
wpa_supplicantwas running.
3. Hardware and Architecture Support
| Platform | Key improvements |
|---|---|
| AMD64 / i386 | Fixed panics on newer VIA/Zhaoxin processors |
| ARM / Raspberry Pi | Improved USB stability and fixed ARMv5 thread-local storage |
| Alpha | Fixed QEMU boot hangs and kernel stack alignment |
| SPARC64 | Improved hardware sensors, I²C support, and real-time clock support |
| HPPA | Added eager FPU switching support, enabled for QEMU |
| MIPS | Fixed QEMU compatibility and undefined-behavior issues |
| Atari TT030 | Fixed kernel boot failures |
| Sun68k | Fixed SCSI booting with certain PROM versions |
Additional driver improvements include:
- Intel
ixl(4)network adapter stability fixes. - SAS3008 RAID controller stability improvements.
- Microsoft Surface Go 3 battery monitoring.
- Reduced boot delays with PCI IDE controllers.
4. Userspace and Build System
- build.sh: Fixed cross-compilation from macOS on Apple Silicon.
- Improved compatibility with modern compilers when building legacy GNU tools.
- Fixed parallel debug-information builds.
- Added checksums for compressed bootable images.
- libc: Corrected
printf()thousands separators and positional arguments. - Dynamic linker: Fixed thread-local storage alignment assertions in debug builds.
- syslogd: Corrected buffering of incomplete kernel log lines.
5. Updated Third-Party Components
| Component | NetBSD 11.1 version |
|---|---|
| OpenSSH | 10.6 |
| Unbound | 1.26.1 |
| Xorg Server | 21.1.25 |
| libX11 | 1.8.14 |
| libXfont2 | 2.0.9 |
| libXi | 1.8.4 |
| libXpm | 3.5.20 |
| libXrender | 1.9.13 |
| libXtst | 1.2.6 |
6. Upgrade Instructions
Existing NetBSD installations can be upgraded using either approach:
- Installation media: Boot a NetBSD 11.1 installation image and select Upgrade.
- Other update methods: Update the kernel and kernel modules first, reboot, then update userspace.
Installation images and source archives are available through the official NetBSD download directory. Distribution checksums are PGP-signed.
7. Platform Availability
NetBSD 11.1 continues supporting an exceptionally broad range of architectures, including:
- Modern x86-64, ARM64, and RISC-V systems.
- Legacy Alpha, VAX, SPARC, MIPS, PowerPC, and Motorola 68k systems.
- Embedded platforms, classic computers, and selected gaming consoles.
- Xen virtualization environments.
The Itanium (ia64) port is included but is not fully supported or functional.
Key Takeaways
- Security-first maintenance release: Addresses several vulnerabilities, including networking and third-party library issues.
- Improved reliability: Fixes filesystem, RAID, virtual memory, networking, and driver problems.
- Broad hardware compatibility: Includes improvements for both modern and legacy architectures.
- Updated software: Incorporates newer OpenSSH, Unbound, Xorg, and X11 components.
- Recommended upgrade: Particularly relevant for NetBSD 11.0 users seeking security fixes and improved stability.
Source: Official NetBSD 11.1 Release Announcement — November 2, 2026.
