OpenBSD 5.8

The OpenBSD project produces a free, multi-platform 4.4BSD-derived UNIX-like operating system. Emphasizing portability, standardization, coherency, correctness, proactive security and integrated cryptography. It comes with almost 9000 software package in its ports, including a custom X11 environment (Xenocara), desktop environments, web and multimedia applications, compilers and programming languages. It also harbours the OpenBSD-maintained software projects OpenSSH, LibreSSL, OpenIKED, OpenBGPD, OpenOSPFD, PacketFilter, OpenNTPD, OpenSMTPD, OpenCVS, pfsync, spamd, tmux, sndio; which are designed with portability to other BSD and Unix-like operating systems in mind. OpenBSD itself runs on over 40 different hardware platforms.

Tags unix bsd kernel os openbsd operating-system
License ISC
State stable

Recent Releases

5.818 Oct 2015 13:42 major feature: Improved hardware support, including: Realtek RTL8188CE wifi, HyperTransport bridges, USB Power Devices (UPS), RTL8111GU, full-speed isochronous EHCI, x86 AVX instructions, more odd trackpads, pvbus(4). Generic network stack improvements. Installer improvements. Routing daemons and other userland network improvements in ldpd, mpw, bgpd, bgpctl, ospfd, carp, radiusd. Security improvements: sudo replaced with doas(1), modern sandboxed file(1) reimplementation, pax/tar/cpio prevent symlink directory lapses, static PIE support for sparc, Alpha switched to secure PLT, improved kernel checks of ELF headers, support for the NX (No-eXecute) bit on i386. Work started on a new process-containment facility called tame(2). Various other improvements in userland tools. OpenBSD HTTPD new features: matching/redirection per Lua patterns, If-Modified-Since, byte-range support, DefaultType support, HSTS, large TLS certificate bundles, CGI env fixes, header escaping and special character handling. OpenSMTPD 5.4.4 reliability and bug fixes. OpenSSH 7.0 security and performance as well as feature improvements. Latest LibreSSL release with just as many security fixes. Totalling 8866 packages for amd64/i386. New software included: Chromium 44.0.2403.125, Emacs 24.5, GNOME 3.16.2, KDE 3.5.10, LibreOffice, MariaDB 10.0.20, Mono 3.12.1, Mozilla Firefox 39.0.3, Postfix 3.0.2, PostgreSQL 9.4.4, Python 3.4.3, Ruby 2.2.2, Tcl/Tk 8.6.4. As usual, steady improvements in manual pages and other documentation. The system includes the following major components from outside suppliers: Xenocara (based on X.Org 7.7 with xserver 1.16.4 + patches, freetype 2.6, fontconfig 2.11.1, Mesa 10.2.9, xterm 314, xkeyboard-config 2.14 and more) Gcc 4.2.1 (+ patches) and 3.3.6 (+ patches) Perl 5.20.2 (+ patches) SQLite 3.8.9 (+ patches) NSD 4.1.3 Unbound 1.5.4 Ncurses 5.7 Binutils 2.17 (+ patches) Gdb 6.3 (+ patches) Less 458 (+ patches) Awk Aug 10, 2011 version
5.701 May 2015 20:25 major feature: Improved hardware support, many new drivers. xhci(4) USB 3.0 host controllers. skgpio(4) Soekris net6501 GPIO and LEDs. nep(4) Sun Neptune 10Gb Ethernet devices. iwm(4) Intel 7260, 7265, and 3160 wifi cards. rtsx(4) supports RTS5227 and RTL8411B card readers. bge(4) supports jumbo frames on various additional BCM57xx chipsets. mpi(4) and mfi(4) drivers now have mpsafe interrupt handlers running without the big lock. ppb(4) supports PCI bridges that support subtractive decoding (fixes PCMCIA behind the ATI SB400 PCI bridge), and devices with 64-bit BARs behind PCI-PCI bridges as seen on SPARC T5-2 systems. sdmmc(4) supports eMMC storage devices larger than 2GB. umass(4) supports Archos 24y Vision devices. athn(4) supports Atheros UB94 devices. pciide(4) supports Intel C610 chipsets. umodem(4) supports Arduino Leonardo devices. sk(4) supports receive ring scaling. Replaced custom jumbo allocators in sk(4), nge(4), lge(4), and ti(4) with MCLGETI(9). Wireless network scanning problems with the iwn(4) driver have been fixed. Support for RS* IGP Radeon devices in the radeondrm(4) driver has been fixed. PowerMac7,2 and PowerMac7,3 can now boot with a multiprocessor kernel. Removed hardware support: lofn(4), art(4), urio(4). Generic network stack improvements: The routing table is now used for most of the address lookup operations superseding the RB-tree and IPv4 address list. The SipHash algorithm is now used for PCB hashing, trunk(4) loadbalancing, pf(4) and bridge(4). Traffic destinated to link-local IPv6 addresses can now be seen with tcpdump(8). A carp(4) now needs to be configured with an explicit carpdev parent interface. The mbuf(9) layer has been made mpsafe. Introduce mbuf_list and mbuf_queue structures and APIs. Support changing the IPv6 input queue length via sysctl(1) and net.inet6.ip6.ifq. Installer improvements. The etc and xetc sets are now part of base and xbase and are not distributed separately anymore. Ask for th
5.602 Nov 2014 07:25 major feature: Integrates LibreSSL (legacy OS and compiler support removed, SSLv2, Kerberos, DTLS, US-SSL, FIPS-140 removed, Brainpool, AES-GCM, ChaCha and Poly1305 added). More hardware support (SCSI, ethernet, wireless and video drivers). Network stack improvements, IPv6 disabled per default. Whole distribution now signify packaged. OpenSMTPD 5.4.3 replaces Sendmail. Security improvements: Default bcrypt hash type is now 2b , md5crypt and MD4 frm cksum removed, Kerberos removed, stack protection added, new getentropy(2) and timingsafe_memcmp(3), fread/fwrite integer overflow checks. OpenSSH 6.7 is included with multiple changes and enhancements. Among the 8600 pre-built packages are GNOME 3.12.2, KDE 3.5.10, KDE 4.13.3, Xfce 4.10, MySQL 5.1.73, PostgreSQL 9.3.4, Postfix 2.11.1, OpenLDAP 2.3.43 and 2.4.39, Mozilla Firefox 31.0, Mozilla Thunderbird 31.0, GHC 7.6.3, LibreOffice, Emacs 21.4 and 24.3, Vim 7.4.135, PHP 5.3.28, 5.4.30 and 5.5.14, Python 2.7.8, 3.3.5 and 3.4.1, Ruby,, and 2.1.2, Tcl/Tk 8.5.15 and 8.6.1, JDK and, Mono 3.4.0, Chromium 36.0.1985.125, Groff 1.22.2, Go 1.3, GCC 4.6.4, 4.8.3 and 4.9.0, LLVM/Clang 3.5 (20140228), Node.js 0.10.28, Xenocara (Xorg 7.7, xserver 1.52.2), GCC 4.2.1, Perl 5.18.2, SQLite, Sudo 1.7.2p8, Ncurses 5.7, and Binutils 2.15.
5.514 Aug 2014 18:08 major feature: * time_t is 64-bit on all platforms. * OpenBSD is now cryptographically signed with signify(1). * New autoinstall(8) method for unattended installs. * USB installation media for i386/amd64. * ALTQ gone, new pf queueing subsystem.