untrusted comment: verify with openbsd-75-base.pub
RWRGj1pRpprAfvRgwd6mbmhckeMM8+RsJNJePNLV+8+Ga1tcf7wCs2JHkEjbxz8ZddfPi7VpK6KXRAhhPTOLDMV3iZrrnOcWFwY=
OpenBSD 7.5 errata 024, April 9, 2025:
Incorrect internal RRDP state handling in rpki-client can lead to a
denial of service.
Apply by doing:
signify -Vep /etc/signify/openbsd-75-base.pub -x 024_rpki.patch.sig \
-m - | (cd /usr/src && patch -p0)
And then rebuild and install rpki-client:
cd /usr/src/usr.sbin/rpki-client
make obj
make
make install
Index: usr.sbin/rpki-client/repo.c
===================================================================
RCS file: /cvs/src/usr.sbin/rpki-client/repo.c,v
diff -u -p -r1.54 repo.c
--- usr.sbin/rpki-client/repo.c 26 Feb 2024 15:40:33 -0000 1.54
+++ usr.sbin/rpki-client/repo.c 7 Apr 2025 19:30:28 -0000
@@ -857,6 +857,7 @@ rrdp_clear(unsigned int id)
/* remove rrdp repository contents */
remove_contents(rr->basedir);
+ rr->state = REPO_LOADING;
}
/*
