Discussing the latest OpenBSD 7.9 release: hardware, userland, and security features including LibreSSL 4.3.0 and OpenSSH updates, the development direction toward 8.0, and the practice of keeping the system up to date via snapshots, syspatch, and pkg_add -u.

In episode 20 you understood the -current vs -stable development model and the syspatch mechanism. Now we look at the current state: OpenBSD 7.9, the release that underpins this entire series. Understanding the latest release isn't just version news — it gives you a picture of the project's direction and the decisions you can make.
At the time this series was written, OpenBSD 7.9 is the latest stable release (May 2026). The next release, 8.0, is predicted to come out in October 2026. Both frame OpenBSD's path forward.
Every release brings driver and hardware support improvements. OpenBSD 7.9 includes fixes for network drivers, storage, and the various supported architectures (amd64, arm64, and others). KARL (Kernel Address Randomization Link) continues to be strengthened as a core mitigation layer.
On the userland side, this release updates many base system tools. The two most attention-grabbing:
Other userland updates include improvements in disk management, networking, and everyday utilities.
LibreSSL 4.3.0 is one of the milestones of this release. As the built-in TLS library (episode 10), its update means:
SSL_* API compatibility.Because LibreSSL is the TLS foundation of the base system, every release has a direct impact on httpd, relayd, smtpd, and OpenSSH.
There are two ways to upgrade to 7.9:
sysupgrade:sysupgrade -r 7.9After the base system is upgraded, update the packages to match the 7.9 repository:
pkg_add -u
pkg_checkpkg_add -u upgrades all packages; pkg_check ensures everything is consistent afterward.
The recommended maintenance routine for a stable release:
syspatch
pkg_add -u
pkg_check
rcctl ls onsyspatch: applies release security patches (episode 20).pkg_add -u: updates third-party packages.pkg_check: validates package consistency (episode 4).rcctl ls on: reviews the running services (episode 6).Schedule this routine periodically — for example every week — and watch the results in the logs.
Info
Always verify your system version before doing anything important: uname -a and sysctl kern.osrelease show the running release. Make sure that release is still supported — OpenBSD typically supports the last two releases for security patches.
The OpenBSD release pattern remains: one release every six months. After 7.9 (May 2026), the next schedule is:
-current, for feature testing and new hardware support.This is why many administrators feel at ease with OpenBSD: a predictable rhythm. You can plan upgrades far in advance and never be surprised by sudden big changes.
When 8.0 is released, the recommended pattern:
sysupgrade, then pkg_add -u and pkg_check.rcctl ls on and the logs.This discipline — test in a VM, snapshot before changes, verify after — is the habit of a true OpenBSD sysadmin.
In episode 21 you understood OpenBSD's current position: 7.9 as the stable release with LibreSSL 4.3.0, OpenSSH, tmux, and hardware support updates, plus the direction toward 8.0 in October 2026, and the routine for keeping the system up to date via syspatch, pkg_add -u, and pkg_check.
Key takeaways:
sysupgrade upgrades the release; pkg_add -u adjusts the packages.syspatch, pkg_add -u, pkg_check, and a service review.In the next episode, episode 22 — the closing episode of this series — we'll look at the ecosystem, alternatives, and final reflections: comparing OpenBSD with FreeBSD, NetBSD, DragonFlyBSD, and Linux, when to choose each, a recap of the whole journey, and the production checklist and official learning resources.