OpenBSD 3.1 is out of the door! Many on the OpenBSD mailing lists have already reported receiving the new CDs. From Todd Miller's announcement email:

"It is our pleasure to officially announce the release of OpenBSD 3.1. This year OpenBSD turns 7 years old. In celebration of this milestone, we invite you to enjoy our 11th release on CD-ROM (and 12th via FTP)."

With this release, the OpenBSD home page has increased its security claim to, "Five years without a remote hole in the default install!"

Find the official release announcement here.

---

What's new (taken from http://www.openbsd.org/31.html#new)
This is a partial list of new features and systems included in OpenBSD 3.1. For a comprehensive list, see the changelog leading to 3.1.

* OpenSSH (supporting both the SSH1 and SSH2 protocols) is now at version 3.2. Secure file transfers are encouraged using the greatly enhanced SFTP subsystem which comes both with an SFTP server and client.

* As usual, improvements to the documentation, notably the man pages and the Web FAQ. A larger part of the website is now available in several languages.

* More complete collection and better tested set of "ports".

* Over 1000 pre-built and tested packages.

* Greatly improved hardware support in the OpenBSD/sparc64 port, and the addition of X11 support.

* Numerous performance improvements to the OpenBSD/macppc port, as well as accelerated X11 servers for some models.

* A lot of enhancements to our new packet filter, pf, including performance improvements, as well as the ability to filter other protocols than the usual tcp, udp and icmp, such as esp.

* An utility to achieve per-user pf rules changes, typically intended for gateways, authpf.

* The in-kernel software raid (RAIDframe) can now automatically detect and configure its raid devices at boot. Taking advantage of this, the system can have its root partition directly mounted from an auto-detected raid partition.

* Wavelan bridging is now possible on Prism-II based cards.

* The system includes the following major components from outside suppliers:

o XFree86 4.2.0 (and i386 contains 3.3.X servers also, thus providing support for all chipsets)
o gcc 2.95.3 (+ patches)
o perl 5.6.1 (+ patches)
o Apache 1.3.24, mod_ssl 2.8.8, OpenSSL 0.9.6b (+ patches), DSO support
o groff 1.15
o sendmail 8.12.2
o lynx 2.8.2rel.1 with HTTPS support added
o sudo 1.6.5p2
o ncurses 5.2
o Latest KAME IPv6
o KTH Kerberos 1.0.8
o Heimdal 0.4e (+ patches)
o OpenSSH 3.2

* Many improvements for security and reliability (look for the red print in the complete changelog).