NetBSD 11.0 released!

The NetBSD project is pleased to (finally) announce the NetBSD 11.0 release!
See the release announcement[1] for details.

Please note that the various ISO images have been split into <700MB
images for CD-ROM media and full-sized DVD images. If you are not
restricted by the size limits of a CD-ROM, make sure to pick the image
with "-dvd.iso" in the name. If you are using flash-based media (e.g. a
USB drive), please use the .img files rather than the .iso images.

If you want to test 11.0 please check the installation notes[2] for your
architecture and download the preferred install image[3] from the CDN. If
you are using an ARM based device, obtain a netbsd-11 image
pre-configured with U-Boot from the bootable ARM images page[4].

If you have any issues with installation or run into issues with the
system during use, please contact us on one of the mailing lists[5] or
file a problem report[6].



Important note about open security issues:

As you are probably aware, the number of security issues found or
suspected everywhere has massively increased with the advent of AI
tools. As a consequence, we can't publish a release without open
issues. Instead of delaying the release further to fix them (new ones
are being reported all the time), we've instead chosen to be
transparent about this.

This release has been quite delayed already, since we've waited for
third-party components to make stable releases so we can get the fixes.
We have avoided publishing any change without making a release
candidate to give users time to test it. Our release process has been
streamlined and automated as far as possible, but besides the time
required to build and generate checksums for every platform, manual
intervention is still required (e.g. security officer signing the
release hashes). The overall process is still limited by the slowest
step - the time it takes to transfer every file for every architecture
over the network.

The open security related pullup requests (and associated gnats problem
reports) are:


    hdaudio(4): Apply access checks to ioctl commands, PR 60492 [7]
       missing local user privilege check, easy manual workaround
       (remove /dev/hdaudio*; audio will still be functional).

    ipfilter: Fix remotely triggerable null pointer deref, PR 60484 [8]
       IPF is not included in any released kernel by default.

    pf: Fix use-after-free in fragment reassembly, PR 60485 [9]
       PF is deprecated and not included in any released kernel by default.

All the open pullup requests will be committed to the stable branch
shortly after the 11.0 release, and become part of the upcoming 11.1
release. We are currently aiming to release 11.1 within the next two
months. 


[1] = https://www.NetBSD.org/releases/formal-11/NetBSD-11.0.html
[2] = https://cdn.NetBSD.org/pub/NetBSD/NetBSD-11.0/amd64/INSTALL.html
[3] = https://cdn.NetBSD.org/pub/NetBSD/NetBSD-11.0/images/
[4] = https://armbsd.org/
[5] = https://mail-index.NetBSD.org/
[6] = https://www.NetBSD.org/cgi-bin/sendpr.cgi?gndb=netbsd
[7] = https://gnats.NetBSD.org/60492
[8] = https://gnats.NetBSD.org/60484
[9] = https://gnats.NetBSD.org/60485