OpenBSD Errata: March 22nd, 2019 (pficmp)

21 March, 2019 by tj@openbsd.org | openbsd

Errata patches for pf have been released for OpenBSD 6.3 and 6.4.

A state in pf could pass ICMP packets to a destination IP address
that did not match the state.

Binary updates for the amd64, i386, and arm64 platforms are available
via the syspatch utility. Source code patches can be found on the
respective errata page:

  https://www.openbsd.org/errata63.html
  https://www.openbsd.org/errata64.html

As these affect the kernel, a reboot will be needed after patching.