Is OpenBSD affected or have all their schizo mitigations finally paid off?

Someone on X mentioned the bug relies on some kind of ASLR bypass.

That rumor is false, probably because Calif, the firm that discovered the exploit also just published an OpenBSD ASLR bypass people think they must be connected.

Php2shell is completely language level. By the time the OS sees it it's just a function of the webserver.