[LeonM]

Wow, Openwall has been really at it when it comes to OpenBSD related vulns.

First with the user authentication vulns [0], now this.

For those running OpenBSD boxes: the patch is available through syspatch, but you may need to change /etc/updateurl to an official OpenBSD CDN, since the patch is still fresh and not yet distributed to all mirrors.

[0] https://www.openbsd.org/errata65.html

[brynet]

The oss-security@ mailing list is hosted by openwall. This advisory was posted by Qualys Security.

[LeonM]

Darn, you are right! I need sleep... But first let me patch my boxes.

[aaron_m04]

Thanks for the tip about needing the official CDN!

It's /etc/installurl not /etc/updateurl.