untrusted comment: signature from openbsd 6.0 base secret key
RWSho3oKSqgLQ7Fd3pidPCqHCaDW23pbANPcfI/fSOmPFnO2pqrTE7FFdudkyvBYqxf23hroaopNJ07mizlp+xb7sXakqPkeyg0=

OpenBSD 6.0 errata 14, Oct 13, 2016:

A logic issue in smtpd's header parsing can cause SMTP sessions to hang.

Apply by doing:
   signify -Vep /etc/signify/openbsd-60-base.pub -x 014_smtpd.patch.sig \
       -m - | (cd /usr/src && patch -p0)

And then rebuild and install smtpd:
   cd /usr/src/usr.sbin/smtpd
   make obj
   make depend
   make
   make install

Index: usr.sbin/smtpd/rfc2822.c
===================================================================
RCS file: /cvs/src/usr.sbin/smtpd/rfc2822.c,v
retrieving revision 1.7.6.1
diff -u -p -r1.7.6.1 rfc2822.c
--- usr.sbin/smtpd/rfc2822.c    23 Aug 2016 11:15:17 -0000      1.7.6.1
+++ usr.sbin/smtpd/rfc2822.c    12 Oct 2016 16:18:07 -0000
@@ -50,6 +50,9 @@ header_callback(struct rfc2822_parser *r
       struct rfc2822_hdr_cb           *hdr_cb;
       struct rfc2822_hdr_miss_cb      *hdr_miss_cb;

+       if (!rp->in_hdr)
+               goto end;
+
       TAILQ_FOREACH(hdr_cb, &rp->hdr_cb, next)
           if (strcasecmp(hdr_cb->name, rp->header.name) == 0) {
                   hdr_cb->func(&rp->header, hdr_cb->arg);
@@ -148,6 +151,8 @@ rfc2822_parser_flush(struct rfc2822_pars
               return;

       header_callback(rp);
+
+       missing_headers_callback(rp);
}

void
Index: usr.sbin/smtpd/smtp_session.c
===================================================================
RCS file: /cvs/src/usr.sbin/smtpd/smtp_session.c,v
retrieving revision 1.284.4.1
diff -u -p -r1.284.4.1 smtp_session.c
--- usr.sbin/smtpd/smtp_session.c       4 Oct 2016 00:12:27 -0000       1.284.4.1
+++ usr.sbin/smtpd/smtp_session.c       12 Oct 2016 16:18:07 -0000
@@ -1343,6 +1343,8 @@ smtp_io(struct io *io, int evt)
                       s->tx->dataeom = 1;
                       if (iobuf_queued(&s->tx->obuf) == 0)
                               smtp_data_io_done(s);
+                       else
+                               io_reload(&s->tx->oev);
                       return;
               }