NetBSD 项目已正式发布 11.0 版本 [1]。该版本的发布经历了延期,项目团队在等待第三方组件的稳定发布以获得修复 [1]。
值得注意的是,发布版本中存在三个未解决的安全问题:hdaudio(4) 的访问控制问题(PR 60492)、ipfilter 中的远程触发空指针解引用漏洞(PR 60484),以及 pf 分段重组中的使用后释放问题(PR 60485)[1]。项目团队选择以透明方式对待这些问题,而非进一步延迟发布 [1],计划在两个月内发布 11.1 版本以修复这些问题 [1]。NetBSD 11.0 支持多个架构平台,包括 ARM 设备 [1]。
The NetBSD project has officially released NetBSD 11.0 [1]. The release follows an extended delay as the team waited for third-party components to stabilize and receive necessary fixes [1].
Despite the lengthy development cycle, three unresolved security issues remain in the release [1]. These vulnerabilities include an access control problem in hdaudio(4) (PR 60492), a remote-triggered null pointer dereference in ipfilter (PR 60484), and a use-after-free issue in pf packet fragmentation reassembly (PR 60485) [1]. Rather than postpone the release further, the project chose to proceed with transparency, stating: "We choose to be transparent about these issues rather than delay the release further" [1]. The team plans to address these problems in version 11.1, which is scheduled for release within two months [1]. The new version supports multiple hardware architectures, including ARM devices [1].