OpenBSD 8.0 release artwork by yvaneht nioj and clanker, featured on the official download page.
*OpenBSD 8.0 arrives on October 20, 2026 as the 61st release. The update widens memory limits, hardens encryption, and adds virtualization depth. Security‑first users must migrate now.*
OpenBSD 8.0 hit the mirrors on October 20, 2026, marking the project’s 61st official release. The update arrives with a sweeping set of kernel, hardware, and userland changes that target both performance and security. With the kernel virtual address space on amd64 leapt to 512 GB, the system can now address far larger memory pools, a shift that reshapes how high‑end workloads run on OpenBSD. Simultaneously, swap encryption now runs on native AES instructions, slashing overhead while preserving the OS’s encryption‑first stance. The release also brings hibernate support to arm64, expands RISC‑V capabilities, and retires the loongson architecture. For administrators and security professionals, the timing is critical: the new features demand immediate testing and deployment to stay ahead of emerging threats.
The amd64 port now supports a 512 GB kernel virtual address space, up from 4 GB, and places the pmap(9) direct map at a random location. Swap encryption on both amd64 and arm64 leverages AES CPU instructions for speed. Arm64 gains hibernate support and bounce buffers. Luna88k sees corrected CMMU register handling and faster fault walks. RISC‑V 64‑bit adds detection of CPU extensions, the 'V' vector extension, and drivers for the Advanced Interrupt Architecture, IMSIC and APIC. Sparc64 switches to the LLVM toolchain, adds bounds checks, and improves SPARCV9 memory alignment. Loongson support is retired. These changes tighten security and broaden hardware reach.
OpenBSD 8.0 fixes memory size calculation in open_wmemstream(3) and resolves a semaphore ID race in semop(2). Inactive page queue heuristics are refined, reducing paging overhead. A new getexecpath(3) call returns the ELF program's execution path, aiding audit trails. Swap encryption now runs on AES instructions, cutting latency. The kernel also validates chunk sizes during hibernate image unpacking, preventing integer overflows and disk image over‑reads. These hardening steps align with OpenBSD's long‑standing security focus while delivering measurable performance gains.
Netstat(1) can now display interface multicast counters and offers a more specific '-q' flag. Mount(8) respects DUIDs with '-u' and preserves them on updates. Sndioctl(1) gains dynamic control of midithru ports and server mode, while sndiod(8) no longer aborts on non‑empty MIDI buffers. Patch(1) resolves infinite loops on malformed ed(1) scripts. Authpf, pflogd, ldapd, ldpd, lpd, radiusd, and snmpd now use execv(3) with absolute paths, tightening execution safety. ELF loading checks ensure headers fit shared libraries, and getpwent(3) memory leaks are sealed. The cumulative userland polish reduces attack surface and improves reliability.
VMM/VMD now handles up to 64 VCPUs per guest and uses file‑based VM ownership. x2apic mode and variable‑length VMX instructions improve guest performance. VMD gains checksum offload, MSI/MSI‑X virtio interrupts, and split‑virtqueue handling. Intel Arc A‑Series GPUs are supported via inteldrm(4), with workarounds for GuC timeouts on Alder Lake. The larger amd64 address space enables mapping more than 4 GB of VRAM. DRM updates to Linux 6.18.53 bring broader driver compatibility. These updates position OpenBSD as a viable hypervisor and graphics platform for modern workloads.
OpenBSD 8.0 was released on October 20, 2026.
The release adds hibernate support on arm64, bounce buffers on arm64 and RISC‑V, vector extension support on RISC‑V, and drivers for the RISC‑V Advanced Interrupt Architecture, IMSIC and APIC. It also switches sparc64 to the LLVM toolchain and retires loongson support.
Userland sees netstat(1) multicast counters, mount(8) DUID handling, dynamic sndioctl(1) controls, patch(1) loop fix, execv(3) usage in several daemons, and numerous bug fixes across ELF loading, memory leaks, and MIDI handling.
The OpenBSD 8.0 release is a decisive step toward larger, faster, and more secure deployments. By widening address spaces, tightening encryption paths, and modernizing virtualization, the project reinforces its reputation for rigorous security without sacrificing performance. Operators who delay adoption risk falling behind on both hardware compatibility and the latest hardening measures. The next few months will test how quickly the community integrates these changes into production environments.
Sources: Hacker News – OpenBSD 8.0 release page (https://www.openbsd.org/80.html)