OpenBSD version history

• OpenBSD CVS repository created by Theo de Raadt.
• While the version number used at this stage was 1.1,^{[lower-alpha 1]} OpenBSD 1.1 was not an official OpenBSD release in the sense which this term subsequently came to be used in.

• Creation of the intro(9) man page, for documenting kernel internals.
• Integration of the update(8) command into the kernel.
• As before, while this version number was used in the early development of the OS, OpenBSD 1.2 was not an official release in the subsequently applicable sense.

• The first official release of OpenBSD, and also the point at which XFree86 first recognized OpenBSD as separate from NetBSD.
• Initial integration of the FreeBSD ports system.
• Replacement of gawk with the AT&T awk.
• Integration of zlib.
• Added sudo.

E-Railed (OpenBSD Mix), a techno track performed by the release mascot Puff Daddy, the famed rapper and political icon.

• After license restrictions were imposed on IPFilter, the pf packet filter was developed. pf is now available in DragonFly BSD, NetBSD and FreeBSD.

• First official remote security hole - OpenSSH integer overflow (errata31 006)

Puff the Barbarian, born in a tiny bowl; Puff was a slave, now he hacks through the C, searching for the Hammer. It is an 80s rock-style song and parody of Conan the Barbarian dealing with open documentation.

• In 2003, code from ALTQ, which had a license disallowing the sale of derivatives, was relicensed, integrated into pf and made available in OpenBSD 3.3.

The Legend of Puffy Hood where Sir Puffy of Ramsay, a freedom fighter who, with Little Bob of Beckley, took from the rich and gave to all. Tells of the POSSE project's cancellation. An unusual blend of both hip-hop and medieval-style music, a parody of the tale of Robin Hood intended to express OpenBSD's attitude to free speech.

• i386 platform switched executable format from a.out to Executable and Linkable Format
• The GPL licensed gzip was replaced by retooling the existing compress tool to include its functionality.
• The GPL licensed grep was replaced with FreeGrep, an updated BSD licensed grep. This new grep is now also available in NetBSD.
• A public domain diff was updated and used to replace the GPL licensed diff previously included.
• Code from the LGPL licensed p0f was relicensed to allow pf to feature passive operating system detection.
• Address space layout randomization (ALSR) by default^[1]

CARP License and Redundancy must be free, where a fish seeking to license his free redundancy protocol, CARP, finds trouble with the red tape. A parody of the Fish License skit and Eric the Half-a-Bee Song by Monty Python, with an anti-software patents message.

• CARP, an open alternative to the HSRP and VRRP redundancy systems available from commercial vendors.
• GPL licensed parts of the GNU tool-set, bc , dc , nm and size , were all replaced with BSD licensed equivalents.
• AMD64 platform becomes stable enough for release and is included for the first time as part of a release.

Pond-erosa Puff (live) was the tale of Pond-erosa Puff, a no-guff freedom fighter from the wild west, set to hang a lickin' on no-good bureaucratic nerds who encumber software with needless words and restrictions. The song was styled after the works of Johnny Cash, a parody of the Spaghetti Western and Clint Eastwood and inspired by liberal license enforcement.

• OpenNTPD, a compatible alternative to the reference NTP daemon, was developed within the OpenBSD project. The goal of OpenNTPD was not solely a compatible license. It also aims to be a simple, secure NTP implementation providing acceptable accuracy for most cases, without requiring detailed configuration .
• Because of its questionable security record and doubts of developers for better future development, OpenBSD removed Ethereal from its ports tree prior to its 3.6 release.

Attack of the Binary BLOB, which chronicles the developer's fight against binary blobs and vendor lock-in, a parody of the 1958 film The Blob and the pop-rock music of the era.

• Enhanced OpenBGPD feature-set.
• Improved hardware sensors framework.

• Second official remote security hole - buffer overflow by malformed ICMPv6 packets (errata40 010)

Trial of the BSD Knights, summarizes the history of BSD including the USL v. BSDi lawsuit. The song was styled after the works of Star Wars.

• sparc64 port now supports many recent processors: Sun UltraSPARC IV, T1, and T2; Fujitsu SPARC64 V, VI, and VII.
• New System-on-a-Chip PowerPC port for Freescale devices
• malloc(3) randomization, guard pages, and randomized (delayed) free^[3][1]

• smtpd(8), privilege-separated SMTP server
• tmux(1) terminal multiplexer

• iked(8) IKEv2 daemon
• ldapd(8) LDAP daemon

• rc.d(8) daemon control

• nginx(8) HTTP server
• SSLv2 disabled

• Position-independent executables (PIE) by default for seven hardware platforms^[1]

• signify(1) cryptographic signatures of release and packages
• 64bit time_t on all platforms (Y2K38 ready)

• LibreSSL fork of OpenSSL
• Apache HTTPD removed from base

• rcctl(8) utility to control daemons
• nginx(8) removed from base

20 years ago today, Fanza, So much better, A Year in the Life.
(20th anniversary release )

• doas(1) replacement of sudo

• W^X enforced in i386 kernel
• pledge(2) process restriction

• Removed vax^[5] and 32-bit SPARC^[6] support