News from the IT community on October 20th: The open-source Unix operating system OpenBSD 8.0 has been officially released today. This is the 61st official version of the project, exactly six months since the release of version 7.9.
For an operating system that takes pride in having only two remote vulnerabilities in over thirty years of default installation, the highlights of version 8.0 do not lie in a single feature, but rather in the simultaneous and significant progress made in virtualization, graphics stack, and hardware platform support.
According to the official announcement from OpenBSD, the new version has undergone multiple updates in areas such as virtualization, graphics drivers, hardware compatibility, networking, and security.
Virtualization is one of the key focuses of this update. OpenBSD 8.0 has improved the built-in VMM / VMD virtualization system, adding support for multiple processors, allowing a single virtual machine to be configured with up to 64 virtual CPU ( vCPU ).
In addition, the new version adds support for the x2APIC mode, introduces MSI / MSI-X interrupt support for virtio devices, and provides a checksum and uninstallation function for virtual machines. It also improves the processing of QCOW disk images. Compatibility issues with 32-bit Linux virtual machines have also been fixed.
In terms of graphics, OpenBSD 8.0 will update the DRM graphics driver to a version based on Linux 6.18.53, and through inteldrm, support for Intel Iris A series (Alchemist) graphics cards will be added. The new version also provides fixes for GuC timeout issues that occur on some systems equipped with Intel Alder Lake processors.
In terms of memory management, OpenBSD 8.0 expands the virtual address space of the AMD64 kernel from 4 GB to 512 GB, allowing the system to map more than 4 GB of video memory. The ARM64 platform also adds support for hibernation and improves the suspend and resume functions for some Qualcomm Snapdragon laptops.
The platform has also received several enhancements, including support for V-vector extensions in the kernel, Advanced Interrupt Architecture (advanced interrupt architecture), and Sstc timer extensions. In addition, the new version has adjusted some hardware drivers to expand support for different processors, network controllers, and peripheral devices.
In terms of wireless networking, the qwx and qwz drivers have added support for 802.11n and 40 MHz channels, and have improved firmware communication, roaming reliability, and power management. In terms of Ethernet, the new version has added support for Intel Panther Lake, Wildcat Lake related devices, and E610 controllers.
In terms of security, OpenBSD 8.0 has conducted multiple checks and repairs on the kernel and system tools, including improvements to the security mechanisms of pledge and unveil, strengthening the verification of executable files, and fixing issues that could lead to out-of-bound access and memory information leaks. The PF firewall has also been updated, addressing issues related to TCP connection tracking, packet processing, race conditions, and potential out-of-bound memory accesses.
The system has added support for a custom HTTP header, and adjusted the default TLS password suite configuration from compat to secure. In terms of network management, the new version introduces rtrd and rtrctl, supports the RPKI-to-Router protocol, and has also improved the routing validation, reconnection handling, and related functions of bgpd.
In terms of encryption components, OpenBSD 8.0 integrates with LibreSSL 4.4. In libtls, the hybrid quantum key exchange algorithm X25519MLKEM768 has become the preferred option in TLS 1.3. The new version also improves certificate verification, TLS processing, and several cryptographic implementations.
OpenSSH will be upgraded to version 10.6, which adds experimental composite post-quantum ML-DSA44 / Ed25519 signature schemes and includes additional authentication options. Security fixes include disabling the LZ77 dictionary encoder to prevent potential side-channel information leaks.
In terms of package management, pkg_add has improved the reliability of some dependency handling loops, fw_update has strengthened signature verification, and syspatch avoids unnecessarily downloading complete archive files when checking for updates.
There have also been updates to the desktop environment and application software. The software package collection of OpenBSD 8.0 includes versions such as KDE Plasma 6.7.5, GNOME 49, Xfce 4.20, Firefox 157, Chromium 154, LibreOffice 26.8, GCC 16.1, and PostgreSQL 18.6. It also provides Wayland 1.26, as well as synthesizers like Sway, Niri, Labwc, and Wayfire.
OpenBSD 8.0 is now available for download through the project's official mirror site. Existing users on OpenBSD 7.9 can also refer to the official upgrade guide to update their systems. The official reminder is to read the relevant operation instructions before upgrading, and to check the disk space in advance, as well as the configuration changes and software package upgrade requirements.
