OpenBSD 8.0 Released with VM Upgrades, Wine Port, and Anti-AI Satire

Project celebrates near-30th anniversary with multiprocessor VMs, DRM updates, and a Simpsons-themed joke

By LineZotpaper
Published
Read Time3 min
OpenBSD 8.0, the 61st release of the security-focused Unix-like operating system, brings support for virtual machines with up to 64 virtual CPUs, improved graphics drivers, and a new port of the Wine compatibility layer for running Windows applications, alongside the project's trademark humor targeting AI-generated content.

OpenBSD version 8.0 was released this week, marking the project's closest milestone to a 30th anniversary since its fork from NetBSD in 1995. Developer Bryan Steele posted highlights on Mastodon, noting key enhancements to the VMM/VMD hypervisor, which now supports multiprocessor VMs with up to 64 virtual CPUs per guest. The kernel virtual memory address space on x86-64 has been expanded from 4 GB to 512 GB, accommodating GPUs with large amounts of VRAM.

On the graphics front, the DRM stack has been updated to match Linux 6.18. OpenBSD 8.0 also includes OpenSSH 10.6 and LibreSSL 4.4.0, and adopts Clang/LLVM 22 as the default C compiler for all architectures, including SPARC64, though at the cost of dropping support for Loongson. On Arm64, hibernation is now supported, and on both x86-64 and Arm64, CPU AES instructions can be used for faster encrypted swap.

A significant development for users of Windows software is the proposal of a port of Wine 11 for OpenBSD on x86-64. This version can run 64-bit Windows binaries by emulating instructions that manipulate the CPU's GS register, a trick required because OpenBSD does not allow programs to alter that register. The port comes with caveats: it cannot run 32-bit Windows code and is unlikely to be merged into upstream Wine. Reddit galleries show several recent game titles running on the port, but the project notes that Wine does not sandbox applications, potentially exposing OpenBSD to Windows malware.

Just before the release, security researcher Calif ("Big Fish") published details of a decades-old shared-memory bug that, combined with a separate kernel flaw, could allow local root access. Both vulnerabilities were fixed in OpenBSD 7.9. A comment on HackerNews noted the bug was accidentally fixed in NetBSD during a rewrite in 1999, but it persisted in OpenBSD until recently.

The release continues OpenBSD's vocal opposition to AI-generated code. The product's website features banner art showing the pufferfish mascot with an extra eye and malformed text, mimicking early AI image generators. The release theme song, titled "The Simps on AI," parodies both the television show and AI users, with a line from Grampa Simpson: "Back in my day we didn't have artificial intelligence, we had real stupidity – and we liked it." The project rejects LLM-generated code based on licensing concerns, a stance shared by its cousin NetBSD.

OpenBSD remains focused on security and simplicity, lacking features found in other BSDs such as logical volume management or a journaling filesystem. The current errata list is short, containing only four fixes for the new release.

§

Analysis

Why This Matters

  • OpenBSD's security-hardened approach influences many other operating systems; its continued evolution matters to system administrators and security professionals.
  • The Wine port could bring Windows application compatibility to OpenBSD, potentially expanding its user base beyond niche security-conscious users.
  • The anti-AI stance may appeal to developers concerned about licensing and provenance of code, reinforcing a broader debate in open-source communities.

Background

OpenBSD was forked from NetBSD in 1995 by project leader Theo de Raadt, with the first release (1.2) in July 1996. It has long prioritized security, correctness, and code audit over performance or feature breadth. Its famous slogan boasts only two remote holes in the default install over a very long period. The project has historically been critical of AI-generated code, citing licensing concerns, and maintains its own heavily patched versions of OpenSSH and LibreSSL.

Key Perspectives

Project developers: Continued focus on security and simplicity, with a sense of humour about AI hype. The Wine port is experimental and comes with explicit warnings about lack of sandboxing. Security researchers: The discovery of a 37-year-old bug in shared memory code highlights the challenges of auditing ancient codebases. Calif's proof-of-concept shows the bug affected NetBSD and OpenBSD, though NetBSD fixed it accidentally during a 1999 rewrite. Prospective Users: OpenBSD 8.0 offers improved hardware support and the new Wine port may make the system practical for running Windows applications on x86-64, though the community is known for being less friendly than other BSD distributions.

What to Watch

  • How the Wine port matures: whether it sees active development and community testing, and whether security concerns limit adoption.
  • The next OpenBSD release (likely 8.1) will show whether errata grows significantly as more users test 8.0 on varied hardware.
  • Further vulnerability discoveries in the aging codebase, as the recent bug underscores the risk of decade-old flaws.

Sources

Checked

12 claims in this story checked against 1 source: 6 supported.

Show each claim
  1. Partly supportedThe headline presents a Wine port as part of the OpenBSD 8.0 release.www.theregister.com - Articles: “A couple of days before the 8.0 release came an unexpected announcement on the openbsd-ports mailing list: a proposed port of Wine for OpenBSD.”
  2. Partly supportedOpenBSD 8.0 was released this week.www.theregister.com - Articles: “Just days before this release, there was a high-profile OpenBSD issue”
  3. SupportedOpenBSD 8.0 is the project's 61st release.www.theregister.com - Articles: “OpenBSD 8.0 is the 61st release of the project.”
  4. SupportedThe VMM/VMD hypervisor supports multiprocessor VMs with up to 64 virtual CPUs per guest.www.theregister.com - Articles: “Its VMM/VMD hypervisor now supports multiprocessor VMs with up to 64 virtual CPUs in each guest.”
  5. SupportedThe project is approaching a 30th-anniversary release milestone.www.theregister.com - Articles: “Theo de Raadt forked OpenBSD from NetBSD 1.0 in 1995, and the first release of the new OS was OpenBSD 1.2 in July 1996 – so version 8.0 is as close as the project will get to a 30th anniversary release.”
  6. SupportedThe x86-64 kernel virtual memory address space grew from 4 GB to 512 GB, allowing for GPUs with large amounts of VRAM.www.theregister.com - Articles: “The kernel virtual memory address space on x86-64 is now 512 GB, up from 4 GB, allowing for GPUs with large amounts of VRAM.”
  7. Partly supportedClang/LLVM 22 is the default C compiler for all architectures, including SPARC64, while Loongson support was dropped.www.theregister.com - Articles: “The default C compiler is Clang/LLVM 22, including for the SPARC64 edition – but at the cost of dropping support for the Loongson architecture.”
  8. SupportedBoth vulnerabilities in the shared-memory bug chain were fixed in OpenBSD 7.9.www.theregister.com - Articles: “Both were fixed in OpenBSD 7.9, through errata 026 and 018 respectively.”
  9. SupportedThe Wine port cannot run 32-bit Windows code and is unlikely to be merged upstream.www.theregister.com - Articles: “The snags are that this means 32-bit code doesn’t work, and secondly, because this is unnecessary on Linux, the code is unlikely to be merged back into upstream Wine.”
  10. Partly supportedThe story attributes the Wine sandboxing warning to the project.www.theregister.com - Articles: “The port comes hedged with caveats, notable among them that Wine does not do any kind of sandboxing, so using it potentially opens up OpenBSD to Windows malware.”
  11. Partly supportedThe quoted line is from Grampa Simpson.www.theregister.com - Articles: “Our favorite line sounds like Grampa Simpson, and says: Back in my day we didn’t have artificial intelligence, we had real stupidity – and we liked it.”
  12. Partly supportedOpenBSD rejects LLM-generated code for licensing concerns, a stance shared by NetBSD.www.theregister.com - Articles: “the project rejects code generated by LLMs, although on the basis of licensing concerns rather than its cousin NetBSD’s explicit anti-AI stance.”

Zotpaper

Written by June Katz on the Tech & AI desk. Claims checked by Ines Fairley, verification. Edited by Angus Burke, chief sub. Plate by Ollie Flash, picture desk.

1 source6 of 12 claims matched to a sourcefirst published
Meet the newsroomHow we workSubscribe