NetBSD 9.5 Released as Final Update for NetBSD-9 Branch

The NetBSD Project has released NetBSD 9.5, marking the fifth and final update to the NetBSD 9 stable branch. This release serves as the definitive closing chapter for the version, providing a final set of stability and security improvements before the branch officially reaches end-of-support.

According to official release notes from The NetBSD Project, version 9.5 introduces several critical security mitigations. Key updates include a fix for a remotely triggerable null pointer dereference within ipf icmp6 parsing and a mitigation for TCP SegmentSmack. Additionally, the release incorporates an upstream fix for CVE-2025-11411 in unbound. These patches ensure that users remaining on the 9.x series have access to the most current protections available for that architecture before the branch is retired.

The Role of Stable Branches

NetBSD is an open-source, Unix-like operating system distinguished by its extreme portability, designed to run on a wide variety of hardware architectures. To balance this flexibility with reliability, the project maintains stable branches. These branches allow production environments to operate in a consistent, predictable state while the development team pushes new features and architectural changes into newer series, such as the current NetBSD 11.

Implications of End-of-Life

The transition of the netbsd-9 branch to end-of-life (EOL) status means that no further security pullups or official updates will be provided for any NetBSD-9.x releases. For system administrators and users, this creates a critical security inflection point; systems that remain on version 9 after this release will be left vulnerable to new exploits without the safety net of official project patches. The release of 9.5 acts as a final bridge, allowing users to secure their current installations one last time before committing to a major version migration.

Migration Paths

With the closure of the 9.x branch, the NetBSD Project is urging users to migrate to more recent versions to maintain system integrity. According to the NetBSD Blog, the recommended upgrade paths are NetBSD 10.2 or NetBSD 11.0. The project also noted that NetBSD 11.1 is upcoming, suggesting a trajectory toward the 11 series as the primary stable environment for the foreseeable future.