C-Kermit 11 is the first full Kermit release in 15 years

Sources: primary, discussion
Summary: Debian maintainer John Goerzen describes modernizing a codebase that predates ANSI C and still targets VMS and OS/2. The work adds IPv6 with runtime fallback, fixes memory-safety and malicious-remote issues in the manner of earlier scp patches, and adds unit and Python end-to-end tests running close to 2000 cases. CI now builds and tests on Linux x86_64 and arm64, macOS, FreeBSD, NetBSD and OpenBSD, plus a static musl binary. The last full release was 9.0.302 in 2011, and distributions had been shipping anything from that version to a beta 18 months old. Development moves to a new Open Kermit project.
Why it matters: Kermit is still used to push firmware to embedded devices, and the packaged versions in circulation carried the unfixed malicious-remote handling.