untrusted comment: verify with openbsd-71-base.pub
RWR2eHwZTOEiTdmVXXYVmk8q0UIATCcINUhR/gTJqfluQtLVeq19D79OVRF0j35BCHRaqDDECFVax2a5gmthOXOn/K3Wmm96DgM=
OpenBSD 7.1 errata 017, December 16, 2022:
Removing a domain can result in an out-of-bounds write in acme-client(8).
Apply by doing:
signify -Vep /etc/signify/openbsd-71-base.pub -x 017_acme.patch.sig \
-m - | (cd /usr/src && patch -p0)
And then rebuild and install acme-client
cd /usr/src/usr.sbin/acme-client
make obj
make
make install
Index: usr.sbin/acme-client/revokeproc.c
===================================================================
RCS file: /cvs/src/usr.sbin/acme-client/revokeproc.c,v
diff -u -p -r1.19 revokeproc.c
--- usr.sbin/acme-client/revokeproc.c 22 Nov 2021 08:26:08 -0000 1.19
+++ usr.sbin/acme-client/revokeproc.c 14 Dec 2022 17:25:11 -0000
@@ -239,6 +239,7 @@ revokeproc(int fd, const char *certfile,
goto out;
}
force = 2;
+ continue;
}
if (found[j]++) {
if (revocate) {
