OpenBSD 7.7 Released with Enhanced Performance, Expanded Hardware Support, and Stronger Security
OpenBSD 7.7, the 58th release of the security-centric operating system, was officially launched on April 28, 2025. This version delivers major upgrades in performance, hardware compatibility, and security architecture.
Performance enhancements are particularly notable on the ARM64 platform, where kernel builds are now approximately 5% faster due to PMAP teardown optimizations that skip unnecessary TLB flushes.
On the AMD64 architecture, OpenBSD 7.7 introduces support for running as an AMD Secure Encrypted Virtualization (SEV) guest under QEMU with EFI, further strengthening virtual machine isolation and security.
Significant networking improvements include the parallelization of TCP output and timer operations. This change allows multiple user-space threads to process different sockets concurrently, resulting in noticeably improved throughput and responsiveness. Additionally, UDP and IPv6 TCP output have seen performance gains of up to 20% thanks to better traffic distribution across queues.
Hardware support has broadened significantly. OpenBSD 7.7 now supports AMD’s Ryzen AI 300 series (Strix Point, Strix Halo, Krackan Point), Radeon RX 9070 graphics cards, and Intel’s Arrow Lake processors. Graphics stack updates align the Direct Rendering Manager and GPU drivers with Linux kernel version 6.12.21.
USB support has also improved. USB 3.0 speeds are now enabled for the xhci(4) and uvideo(4) drivers, resolving long-standing speed bottlenecks for USB devices.
New network drivers include ice(4) for Intel E810 Ethernet hardware and ixv(4) for virtual functions of Intel 82598EB, 82559, and X540 chipsets.
Security enhancements remain a focal point. The SSH daemon has been refactored to isolate user authentication code into a new sshd-auth binary, completely separating it from the sshd-session process. This reduces the risk associated with pre-authentication vulnerabilities by isolating attack surfaces.
OpenSSH 10.0 is included, now using the hybrid post-quantum algorithm mlkem768x25519-sha256 by default for key exchanges. This ensures forward-looking cryptographic resilience against future quantum-based threats while maintaining compatibility with existing systems.
Installation and upgrade processes are now more streamlined. The sysupgrade(8) tool supports targeting specific releases and performing offline upgrades from local filesets. Meanwhile, fw_update(8) can now download firmware without requiring root privileges and offers improved driver detection.
The release also ships with a vast set of pre-built packages—over 12,500 for the amd64 architecture alone. It includes up-to-date software such as Firefox 137.0, Thunderbird 128.9.0, GNOME 47, and KDE Plasma 6.3.3.
Developers will benefit from LibreSSL 4.1.0, which includes internal performance improvements and optimized SHA-1, SHA-256, and SHA-512 implementations on amd64 that leverage SHA-NI instructions where available.
For users upgrading from OpenBSD 7.6, most can take advantage of the simplified process using sysupgrade(8). Full instructions are available in the official upgrade guide.
