| Version | Release date | Supported until | Significant changes |
| 18 October 1995 | |
- OpenBSD CVS repository created by Theo de Raadt.
- While the version number used at this stage was 1.1, OpenBSD 1.1 was not an official OpenBSD release in the sense which this term subsequently came to be used.
|
| 1 July 1996 | | Creation of the intro man page, for documenting kernel internals. Integration of the update command into the kernel. As before, while this version number was used in the early development of the OS, OpenBSD 1.2 was not an official release in the subsequently applicable sense. |
| 1 October 1996 | | The first official release of OpenBSD, and also the point at which XFree86 first recognized OpenBSD as separate from NetBSD. Initial integration of the FreeBSD ports system. Replacement of gawk with the AT&T awk. Integration of zlib. Added sudo. |
| 1 June 1997 | | Replacement of the older sh with pdksh. |
| 1 December 1997 | | Addition of the afterboot man page. |
| 19 May 1998 | | Introduced the haloed daemon, or aureola beastie, in head-only form created by Erick Green. |
| 1 December 1998 | | Featured the complete haloed daemon, with trident and a finished body. |
| 19 May 1999 | | Introduced the Cop daemon image done by Ty Semaka. |
| 1 December 1999 | | Based on the original SSH suite and developed further by the OpenBSD team, 2.6 saw the first release of OpenSSH, which is now available standard on most Unix-like operating systems and is the most widely used SSH suite. |
| 15 June 2000 | | Support for SSH2 added to OpenSSH. |
| 1 December 2000 | | isakmpd |
| 1 June 2001 | | |
| 1 December 2001 | | E-Railed , a techno track performed by the release mascot Puff Daddy, the famed rapper and political icon.
|
| 19 May 2002 | | Systemagic, where Puffy, the Kitten Slayer, battles evil script kitties. Inspired by the works of Rammstein and a parody of Buffy the Vampire Slayer. First official remote security hole - OpenSSH integer overflow |
| 1 November 2002 | | Goldflipper, a tale in which James Pond, agent 077, super spy and suave lady's man, deals with the dangers of a hostile internet. Styled after the orchestral introductory ballads of James Bond films. |
| 1 May 2003 | | Puff the Barbarian, born in a tiny bowl; Puff was a slave, now he hacks through the C, searching for the Hammer. It is an 80s rock-style song and parody of Conan the Barbarian dealing with open documentation.
- In 2003, code from ALTQ, which had a license disallowing the sale of derivatives, was relicensed, integrated into pf and made available in OpenBSD 3.3.
- First release adding the W^X feature, a fine-grained memory permissions layout, ensuring that memory which can be written to by application programs can not be executable at the same time and vice versa.
|
| 1 November 2003 | | The Legend of Puffy Hood where Sir Puffy of Ramsay, a freedom fighter who, with Little Bob of Beckley, took from the rich and gave to all. Tells of the POSSE project's cancellation. An unusual blend of both hip-hop and medieval-style music, a parody of the tale of Robin Hood intended to express OpenBSD's attitude to free speech.
- i386 platform switched executable format from a.out to Executable and Linkable Format
- The GPL licensed gzip was replaced by retooling the existing compress tool to include its functionality.
- The GPL licensed grep was replaced with, an updated BSD licensed grep. This new grep is now also available in NetBSD.
- A public domain diff was updated and used to replace the GPL licensed diff previously included.
- Code from the LGPL licensed was relicensed to allow pf to feature passive operating system detection.
- Address space layout randomization by default
- Basic sysctl hw.sensors API introduced for hardware monitoring.
|
| 1 May 2004 | | CARP License and Redundancy must be free, where a fish seeking to license his free redundancy protocol, CARP, finds trouble with the red tape. A parody of the Fish License skit and Eric the Half-a-Bee Song by Monty Python, with an anti-software patents message.
- CARP, an open alternative to the HSRP and VRRP redundancy systems available from commercial vendors.
- GPL licensed parts of the GNU tool-set, bc, dc, nm and size, were all replaced with BSD licensed equivalents.
- AMD64 platform becomes stable enough for release and is included for the first time as part of a release.
|
| 1 November 2004 | | Pond-erosa Puff was the tale of Pond-erosa Puff, a no-guff freedom fighter from the wild west, set to hang a lickin' on no-good bureaucratic nerds who encumber software with needless words and restrictions. The song was styled after the works of Johnny Cash, a parody of the Spaghetti Western and Clint Eastwood and inspired by liberal license enforcement.
- OpenNTPD, a compatible alternative to the reference NTP daemon, was developed within the OpenBSD project. The goal of OpenNTPD was not solely a compatible license. It also aims to be a simple, secure NTP implementation providing acceptable accuracy for most cases, without requiring detailed configuration.
- Because of its questionable security record and doubts of developers for better future development, OpenBSD removed Ethereal from its ports tree prior to its 3.6 release.
- Added support for I²C master/slave devices
|
| 19 May 2005 | | The Wizard of OS, where Puffathy, a little Alberta girl, must work with Taiwan to save the day by getting unencumbered wireless. This release was styled after the works of Pink Floyd and a parody of The Wizard of Oz; this dealt with wireless hacking. |
| 1 November 2005 | 1 November 2006 | Hackers of the Lost RAID, which detailed the exploits of Puffiana Jones, famed hackologist and adventurer, seeking out the Lost RAID, Styled after the radio serials of the 1930s and 40s, this was a parody of Indiana Jones and was linked to the new RAID tools featured as part of this release. This is the first version released without the telnet daemon which was completely removed from the source tree by Theo de Raadt in May 2005. bioctl introduced as a new universal RAID management tool |
| 1 May 2006 | 1 May 2007 | Attack of the Binary BLOB, which chronicles the developer's fight against binary blobs and vendor lock-in, a parody of the 1958 film The Blob and the pop-rock music of the era.
- Enhanced OpenBGPD feature-set.
- Improved hardware sensors support, including a new IPMI subsystem and a new I²C scan subsystem; number of drivers using the sensors framework increased to a total of 33 drivers.
|
| 1 November 2006 | 1 November 2007 | Humppa Negala, a Hava Nagilah parody with a portion of Entrance of the Gladiators and Humppa music fused together, with no story behind it, simply a homage to one of the OpenBSD developers' favorite genres of music. Second official remote security hole - buffer overflow by malformed ICMPv6 packets |
| 1 May 2007 | 1 May 2008 | Puffy Baba and the 40 Vendors, a parody of the Arabic fable Ali Baba and the Forty Thieves, part of the book of One Thousand and One Nights, in which Linux developers are mocked over their allowance of non-disclosure agreements when developing software while at the same time implying hardware vendors are criminals for not releasing documentation required to make reliable device drivers. Redesigned sysctl hw.sensors into a two-level sensor API; a total of 46 device drivers exporting sensors through the framework with this release. |
| 1 November 2007 | 1 November 2008 | 100001 1010101, the Linux kernel developers gets a knock for violating the ISC-style license of OpenBSD's open hardware abstraction layer for Atheros wireless cards. Usability of sensorsd improved, allowing zero-configuration monitoring of smart sensors from the hw.sensors framework, and easier configuration for monitoring of non-smart sensors. |
| 1 May 2008 | 1 May 2009 | Home to Hypocrisy |
| 1 November 2008 | 18 October 2009 | Trial of the BSD Knights, summarizes the history of BSD including the USL v. BSDi lawsuit. The song was styled after the works of Star Wars.
- sparc64 port now supports many recent processors: Sun UltraSPARC IV, T1, and T2; Fujitsu SPARC64 V, VI, and VII.
- New System-on-a-Chip PowerPC port for Freescale devices
- malloc randomization, guard pages, and randomized free
- The hw.sensors framework is used by 68 device drivers, after 7 new drivers were added as of this release.
|
| 1 May 2009 | 19 May 2010 | Games. It was styled after the works of Tron. The hw.sensors framework is used by 72 device drivers. |
| 18 October 2009 | 1 November 2010 | Planet of the Users. In the style of Planet of the Apes, Puffy travels in time to find a dumbed-down dystopia, where "one very rich man runs the earth with one multinational". Open-source software has since been replaced by one-button computers, one-channel televisions, and closed-source software which, after you purchase it, becomes obsolete before you have a chance to use it. People subsist on soylent green. The theme song is performed in the reggae rock style of The Police. smtpd, privilege-separated SMTP server tmux terminal multiplexer The hw.sensors framework is used by 75 device drivers. |
| 19 May 2010 | 1 May 2011 | I'm Still Here |
| 1 November 2010 | 1 November 2011 | El Puffiachi. iked IKEv2 daemon ldapd LDAP daemon |
| 1 May 2011 | 1 May 2012 | The Answer. rc.d daemon control |
| 1 November 2011 | 1 November 2012 | What Me Worry?. |
| 1 May 2012 | 1 May 2014 | Bug Busters. The song was styled after the works of Ghostbusters. |
| 1 November 2012 | 1 November 2013 | Aquarela do Linux. nginx HTTP server SSLv2 disabled |
| 1 May 2013 | 1 May 2014 | Blade Swimmer. The song was styled after the works of Roy Lee, a parody of Blade Runner. Position-independent executables by default for seven hardware platforms |
| 1 November 2013 | 1 November 2014 | Our favorite hacks, a parody of My Favorite Things. |
| 1 May 2014 | 1 May 2015 | Wrap in Time. signify cryptographic signatures of release and packages 64bit time_t on all platforms |
| 1 November 2014 | 18 October 2015 | Ride of the Valkyries. LibreSSL fork of OpenSSL Apache HTTPD removed from base |
| 1 May 2015 | 29 March 2016 | Source Fish. rcctl utility to control daemons nginx removed from base procfs has been removed |
| 18 October 2015 | 1 September 2016 | 20 years ago today, Fanza, So much better, A Year in the Life. doas replacement of sudo |
| 29 March 2016 | 11 April 2017 | Doctor W^X, Systemagic . W^X enforced in i386 kernel pledge process restriction |
| 1 September 2016 | 9 October 2017 | Another Smash of the Stack, Black Hat, Money, Comfortably Dumb , Mother, Goodbye and Wish you were Secure, Release songs parodies of Pink Floyd's The Wall, Comfortably Numb and Wish You Were Here. vmm virtualization Removed vax and 32-bit SPARC support |
| 11 April 2017 | 15 April 2018 | Winter of 95, a parody of Summer of '69. syspatch utility for binary base system updates new arm64 platform |
| 9 October 2017 | 18 October 2018 | A three-line diff inteldrm Skylake/Kaby Lake/Cherryview devices clang base system compiler on i386 and amd64 platforms |
| 2 April 2018 | 3 May 2019 | SMP is supported on arm64 platforms. Several parts of the network stack now run without KERNEL_LOCK. Multiple security improvements have been made, including Meltdown/Spectre mitigations. Intel CPU microcode is loaded on boot on amd64. pledge has been modified to support "execpromises". |
| 18 October 2018 | 17 October 2019 | unveil filesystem visibility restriction. |
| 24 April 2019 | 19 May 2020 | Support for parsing NMEA 0183 altitude and ground speed hw.sensors. Xenocara: Xorg is no longer setuid. |
| 17 October 2019 | October 2020 | sysupgrade automates upgrades to new releases or snapshots. amdgpu AMD RADEON GPU video driver. |
| 19 May 2020 | May 2021 | Made ffs2 the default filesystem type on installs except for landisk, luna88k and sgi. |
| Version | Release date | Supported until | Significant changes |
