BSDSec

deadsimple BSD Security Advisories and Announcements

OpenBSD Errata: March 1st, 2019 (pf6frag)

Errata patches for pf have been released for OpenBSD 6.3 and 6.4.

Fragmented IPv6 packets may be erroneously passed by pf or lead to a crash.

Binary updates for the amd64, i386, and arm64 platforms are available
via the syspatch utility. Source code patches can be found on the
respective errata page:

  https://www.openbsd.org/errata63.html
  https://www.openbsd.org/errata64.html

As these affect the kernel, a reboot will be needed after patching.