We list mitigations added in all OpenBSD versions.
| Version (and date) | Mitigation | References |
|---|---|---|
| ? | DEP | ? |
| ? | ASLR | ? |
| >= OpenBSD 5.7 | Removed procfs entirely | 8, 9, 10 |
| >= OpenBSD 5.9 | Pledge — restrict system operations | 1 |
| >= OpenBSD 6.4 | RETGUARD to clang/amd64 | 2 |
| OpenBSD ??? | int03 added to prologues to "disable" ROP gadgets | 2 |
| OpenBSD 6.4 | Disable Intel Hyper Threading | 2 4 5 6 7 |
| OpenBSD 6.4? | Misc. mitigations against speculative execution vulnerabilities | 3 |