NetBSD 项目已正式发布 11.0 版本 1。该版本的发布经历了延期,项目团队在等待第三方组件的稳定发布以获得修复 1。
值得注意的是,发布版本中存在三个未解决的安全问题:hdaudio(4) 的访问控制问题(PR 60492)、ipfilter 中的远程触发空指针解引用漏洞(PR 60484),以及 pf 分段重组中的使用后释放问题(PR 60485)1。项目团队选择以透明方式对待这些问题,而非进一步延迟发布 1,计划在两个月内发布 11.1 版本以修复这些问题 1。NetBSD 11.0 支持多个架构平台,包括 ARM 设备 1。
The NetBSD project has officially released NetBSD 11.0 1. The release follows an extended delay as the team waited for third-party components to stabilize and receive necessary fixes 1.
Despite the lengthy development cycle, three unresolved security issues remain in the release 1. These vulnerabilities include an access control problem in hdaudio(4) (PR 60492), a remote-triggered null pointer dereference in ipfilter (PR 60484), and a use-after-free issue in pf packet fragmentation reassembly (PR 60485) 1. Rather than postpone the release further, the project chose to proceed with transparency, stating: "We choose to be transparent about these issues rather than delay the release further" 1. The team plans to address these problems in version 11.1, which is scheduled for release within two months 1. The new version supports multiple hardware architectures, including ARM devices 1.
评论
还没有评论,欢迎留下第一条。