The project to implement WPA3 support for OpenBSD 802.11 wireless has now been funded by a grant from the NLNet Foundation.

The work is to be carried out by Stefan Sperling (stsp@) and Chirpy Software.

The announcement states,

This project delivers the second open-source implementation of WPA3, the current industry standard for Wi-Fi encryption, specifically for the OpenBSD operating system. Its code can also be integrated by other operating systems to enable modern Wi-Fi encryption, thereby enhancing the diversity and resilience of the global IT ecosystem.

The project has an October 2025 start date, which likely means that work to implement even better Wi-Fi support in our favorite operating system is already under way. Read more from the announcement at the NLNet Foundation website.

We look forward to seeing the tangible results in future commits!

The LibreSSL project has announced their latest release LibreSSL 4.2.0, with numerous improvements. The release announcement reads,

List:       openbsd-announce
Subject:    LibreSSL 4.2.0 Released
From:       Brent Cook <busterb () gmail ! com>
Date:       2025-10-14 14:19:28


We have released LibreSSL 4.2.0, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon. This is the
first stable release for the 4.2.x branch, also to be available with OpenBSD 7.8

It includes the following changes from LibreSSL 4.1.0:

Cranking up the heat for the upcoming OpenBSD 7.8 release, the OpenSSH project has issued OpenSSH 10.2.

This is a bugfix release that supersedes the previously announced OpenSSH 10.1 in time for the general release.

From the release notes:

Changes since OpenSSH 10.1
==========================

This is a bugfix release, primarily to fix a problem that rendered
ssh(1) unusable when ControlPersist was enabled.

Jonathan Gray (jsg@) updated the version of OpenBSD -current from "7.8" to "7.8-current".

Those running the latest-and-greatest [via a sufficiently new snapshot or built from source] no longer need to use "-D snap" with pkg_add(1) (and pkg_info(1)).

The OpenSSH project has released OpenSSH 10.1, which is also the release that will be part of the upcoming OpenBSD 7.8 release.

The release was marked by a very unobtrusive sequence of www commits, with the first saying simply

List:       openbsd-cvs
Subject:    CVS: cvs.openbsd.org: www
From:       Damien Miller <djm () cvs ! openbsd ! org>
Date:       2025-10-06 7:11:57


CVSROOT:	/cvs
Module name:	www
Changes by:	djm@cvs.openbsd.org	2025/10/06 01:11:57

Added files:
	openssh/txt    : release-10.1 

Log message:
openssh-10.1 release notes

which points to the OpenSSH 10.1 release notes, giving a fuller description of the new release.

If you're running -current or jumping snapshot to snapshot, you should already be running code equal to or very close to this.

Version 0.120 of Game of Trees has been released (and the port updated):

• disable gotwebd authentication if it is not enabled in /etc/gotwebd.conf
• ensure that GOTWEBD_LOGIN_TIMEOUT is used consistently at build time
• prevent date-specific gotsysd regress failures due to asctime_r whitespace
• make gotwebd refuse to start up if the _gotwebd user is root
• make gotwebd warn if the webserver's user is set to root in /etc/gotwebd.conf
• add /etc/gotwebd.conf parameters for hiding repositories
• reject bad hostnames provided to the gotsh weblogin command
• allow gotwebd to optionally display a login hint when authentication fails

LibreSSL version 4.1.1 and 4.0.1 have been released.

The 4.1.1 release notes read:

Version 0.119 of Game of Trees has been released (and the port updated):

The OpenBSD 7.8 release cycle is entering its final phases…

With the following commit, Theo de Raadt (deraadt@) moved -current to version 7.8 (dropping the "-beta"):

List:       openbsd-cvs
Subject:    CVS: cvs.openbsd.org: src
From:       Theo de Raadt <deraadt () cvs ! openbsd ! org>
Date:       2025-09-30 14:49:51

CVSROOT:	/cvs
Module name:	src
Changes by:	deraadt@cvs.openbsd.org	2025/09/30 08:49:51

Modified files:
	sys/conf       : newvers.sh 

Log message:
move out of -beta

For those unfamiliar with the process:
this is not the 7.8 release, but is part of the standard build-up to the release.

Remember: It's time to start using "-D snap" with pkg_add(1) (and pkg_info(1)).

(Regular readers will know what comes next…)
This serves as an excellent reminder to upgrade snapshots frequently, test both base and ports, and report problems [plus, of course, donate!].