We have to admit that even users of a well rounded operation system like OpenBSD sometimes encounter hardware that is not quite supported yet.

Fortunately, sometimes the user facing the problematic hardware is an experienced developer like Ian Darwin, and he took the time to write up his experience in a blog post titled Un-hanging the HP Envy 17-DA0013dx for OpenBSD.

The article leads in with,

I recently acquired a lightly-used HP Envy 17" laptop, model DA0013dx, and of course wanted to run OpenBSD on it. It came with Windows 11 on an internal NVME drive. Booting OpenBSD from a USB device failed fast: it hung. To get there, first of course I had to disable "secure boot" in the BIOS.

and chronicles the steps until he reaches the conclusion,

Last words

If you want a modern laptop with a 16:9 touchscreen display to run OpenBSD, the HP Envy is not a bad choice.

If this sounds good to you, go on read the whole thing!

In their usual, unassuming fashion, the OpenSSH project have released a new version, release 10.6.

The full text of the 10.6 release nodes reads:

OpenSSH 10.6 was released on 2026-10-06. It is available from the
mirrors listed at https://www.openssh.com/.

OpenSSH is a 100% complete SSH protocol 2.0 implementation and
includes sftp client and server support.

Recently the OpenSSH team have received a large number of security
bug reports, many of which are findings from AI models or made with
AI assistance. While many AI reports are determined not to have
security impact when considered in the context of a realistic
threat model, we very much welcome these reports, especially when
combined with human triage, analysis, test-cases and particularly
when accompanied by proposed fixes.

In a move that hints strongly that the new OpenBSD release is about to drop soon, the LibreSSL project have announced the new stable releases.

The announcement reads,

List:       openbsd-announce
Subject:    LibreSSL 4.2.2 and 4.3.3 released
From:       Brent Cook <busterb () gmail ! com>
Date:       2026-10-06 0:38:40

We have released LibreSSL 4.3.3 and 4.2.2, which are available in the
LibreSSL directory of your local OpenBSD mirror.

As previously noted, Rafael Sadowski (radowski@) has been behind a recent pickup in development of httpd(8) and relayd(8).

Now Rafael has written a new piece, entitled Headers Up! What's New in httpd and relayd, on some of his recent work on httpd(8) and relayd(8).

Among the notable additions are expanded and improved filtering and pattern matching features which make it harder to make a case for putting something like nginx in front of your httpd(8) and relayd(8) setups.

So while we at Undeadly were making notes with a view to reporting on all these features, Rafael himself beat us to it.

His latest article is well worth reading, here.

In another hint that a new OpenBSD release is close, the OpenBGPD project has announced a new release of its software, version 9.3:

We have released OpenBGPD 9.3, which will be arriving in the
OpenBGPD directory of your local OpenBSD mirror soon.

This release includes the following changes to the previous release:

    * Add shorthand for well-known "DOWNGRADE" BGP community.

    * Remove support old aspa-set table format that included per-provider AFI.
      Rpki-client stopped issuing those with the 8.5 release in July 2023.

    * Use getexecpath in the fork-and-execute privilege separation setup
      and implement portable shims for various other operating systems.

    * Various minor fixes:
       - Improve graceful restart timer handling for multi-AFI/SAFI sessions.
       - Clear the connected nexthop flag when nexthops and nexthops are
	 no longer connected.
       - Fix edge case where an ASPA table update was not applied because the
	 system erroneously thought the table did not change.

OpenBGPD-portable is known to compile and run on FreeBSD and the
Linux distributions Alpine, Debian, Fedora, RHEL/CentOS and Ubuntu.
It is our hope that packagers take interest and help adapt OpenBGPD-portable
to more distributions.

We welcome feedback and improvements from the broader community.
Thanks to all of the contributors who helped make this release
possible.

Theo de Raadt (deraadt@) updated the version of OpenBSD -current from "8.0" to "8.0-current".

List:       openbsd-cvs
Subject:    CVS: cvs.openbsd.org: src
From:       Theo de Raadt <deraadt () cvs ! openbsd ! org>
Date:       2026-09-30 20:44:06
Message-ID: 93920a1f5b4035b8 () cvs ! openbsd ! org

CVSROOT:	/cvs
Module name:	src
Changes by:	deraadt@cvs.openbsd.org	2026/09/30 14:44:06

Modified files:
	sys/conf       : newvers.sh 

Log message:
8.0 -current development

Thes means that those running the latest-and-greatest [via a sufficiently new snapshot or built from source] no longer need to use "-D snap" with pkg_add(1) (and pkg_info(1)).

The OpenBSD 8.0 release cycle is entering its final phases…

With the following commit, Theo de Raadt (deraadt@) moved -current to version 8.0 (dropping the "-beta"):

CVSROOT:	/cvs
Module name:	src
Changes by:	deraadt@cvs.openbsd.org	2026/09/26 10:41:23

Modified files:
	sys/conf       : newvers.sh 

Log message:
leave -beta

For those unfamiliar with the process:
this is not the 8.0 release, but is part of the standard build-up to the release.

Remember: It's time to start using "-D snap" with pkg_add(1) (and pkg_info(1)).

(Regular readers will know what comes next…)
This serves as an excellent reminder to upgrade snapshots frequently, test both base and ports, and report problems [plus, of course, donate!].

Job Snijders (job@) imported rtrd(8), and its associated control program, rtrctl(8):

CVSROOT:	/cvs
Module name:	src
Changes by:	job@cvs.openbsd.org	2026/09/16 10:11:46

Added files:
	usr.sbin/rtrctl: Makefile ometric.c ometric.h rtrctl.8 rtrctl.c 
	usr.sbin/rtrd  : Makefile RTRX.PROTOCOL cache.c cache.h 
	                 commands.c commands.h hash.c hash.h ip_utils.c 
	                 ip_utils.h logs.c logs.h packets.c packets.h 
	                 rtr_config.h rtrd.8 rtrd.c sched.c sched.h 
	                 send.c send.h signals.c signals.h sockets.c 
	                 sockets.h stats.c stats.h structs.h tables.c 
	                 tables.h version.h 

Log message:
Import rtrd(8), an easy-to-use RPKI-To-Router protocol implementation

The rtrd(8) program is intended as a scalable distribution layer to
deliver data produced by rpki-client(8) to clients such as bgpd(8)
in multi-node/multi-vendor IXP and ISP deployments. A single rtrd(8)
instance can concurrently serve many BGP routers and route servers.

Many thanks to Ralph Covelli from Hurricane Electric for creating rtrd!

OK deraadt@ claudio@

The software was later linked to the build

The original author, Ralph Covelli, is now rcovelli@.

Mike Larkin (mlarkin@) committed support for multi-processor virtual machines (i.e. guests):

CVSROOT:	/cvs
Module name:	src
Changes by:	mlarkin@cvs.openbsd.org	2026/09/17 20:35:55

Modified files:
	sys/arch/amd64/amd64: vmm_machdep.c 
	sys/arch/amd64/include: vmmvar.h 
	sys/dev/vmm    : vmm.c 
	usr.sbin/vmctl : main.c vmctl.8 vmctl.c vmctl.h 
	usr.sbin/vmd   : arm64_vm.c fw_cfg.c lapic.c lapic.h parse.y 
	                 vm.c vm.conf.5 vmd.c vmd.h x86_vm.c 

Log message:
vmm(4)/vmd(8): mp plumbing

Implements the sipi/init lapic state machine, mp IPI support and various
other changes required for mp. vmctl and man page changes for new start
and vm.conf options.

tested by dv and me on various guests

ok dv

This represents a huge jump forward in vmm(4)/vmd(8) flexibility and usability.