Errata patches for OpenSMTPD have been released for OpenBSD 6.5 and 6.6.
smtpd can crash on opportunistic TLS downgrade, causing a denial of service.
Binary updates for the amd64, i386, and arm64 platforms are available via
the syspatch utility. Source code patches can be found on the respective
errata page:
https://www.openbsd.org/errata65.html
https://www.openbsd.org/errata66.html
After patching, restart the smtpd service.
No comments:
Post a Comment