untrusted comment: verify with openbsd-63-base.pub
RWRxzbLwAd76ZY38yqd/TJ8+pXvPUerkbdp09oqLgSABa0p/aLelFTAUiseJGYhnOLY7sQMZnmAI550j3R3CGGOKyi1zgf9RDQk=

OpenBSD 6.3 errata 021, November 2, 2018

The syspatch utility incorrectly handles symbolic links.

Apply by doing:
   signify -Vep /etc/signify/openbsd-63-base.pub -x 021_syspatch.patch.sig \
       -m - | (cd /usr/src && patch -p0)

And then install the syspatch utility
   cd /usr/src/usr.sbin/syspatch
   make install

Index: usr.sbin/syspatch/syspatch.sh
===================================================================
RCS file: /cvs/src/usr.sbin/syspatch/syspatch.sh,v
retrieving revision 1.135
diff -u -p -r1.135 syspatch.sh
--- usr.sbin/syspatch/syspatch.sh       10 Mar 2018 12:34:53 -0000      1.135
+++ usr.sbin/syspatch/syspatch.sh       29 Oct 2018 19:24:55 -0000
@@ -140,6 +140,9 @@ install_file()
       local _dst=$2 _fgrp _fmode _fown _src=$1
       [[ -f ${_src} && -f ${_dst} ]]

+       # ignore symlinks
+       [[ ! -h ${_src} ]] || return 0
+
       eval $(stat -f "_fmode=%OMp%OLp _fown=%Su _fgrp=%Sg" ${_src})

       install -DFSp -m ${_fmode} -o ${_fown} -g ${_fgrp} ${_src} ${_dst}
@@ -196,6 +199,11 @@ rollback_patch()

       for _file in ${_files}; do
               ((_ret == 0)) || break
+               # prevent reverting to a bogus syspatch
+               if [[ ${_file} == usr/sbin/syspatch &&
+                       ${_patch} == 63-021_syspatch ]]; then
+                       break
+               fi
               install_file ${_edir}/${_file} /${_file} || _ret=$?
       done

@@ -304,4 +312,8 @@ if ((OPTIND == 1)); then
       for _PATCH in ${_PATCHES}; do
               apply_patch ${_OSrev}-${_PATCH}
       done
+       # repair X -> Xorg
+       if [[ ! -h /usr/X11R6/bin/X ]]; then
+               ln -sf Xorg /usr/X11R6/bin/X
+       fi
fi