untrusted comment: verify with openbsd-65-base.pub
RWSZaRmt1LEQT6lDDJV2+8irIJAYgXVEOLoz05WYLFraf4kdEY4uwW55/ejxTsnp9EhQXL2Fx0OPGKqtcp0+LAn1OJlGx+wT8wI=

OpenBSD 6.5 errata 014, October 5, 2019:

dhcpd leaks 4-bytes of stack to the network.

Apply by doing:
    signify -Vep /etc/signify/openbsd-65-base.pub -x 014_dhcpd.patch.sig \
        -m - | (cd /usr/src && patch -p0)

And then rebuild and install dhcpd:

    cd /usr/src/usr.sbin/dhcpd
    make obj
    make
    make install

Index: usr.sbin/dhcpd/icmp.c
===================================================================
RCS file: /cvs/src/usr.sbin/dhcpd/icmp.c,v
diff -u -p -r1.18 icmp.c
--- usr.sbin/dhcpd/icmp.c	13 Feb 2017 23:04:05 -0000	1.18
+++ usr.sbin/dhcpd/icmp.c	3 Oct 2019 14:24:27 -0000
@@ -107,10 +107,8 @@ icmp_echorequest(struct iaddr *addr)
 	to.sin_family = AF_INET;
 	memcpy(&to.sin_addr, addr->iabuf, sizeof to.sin_addr);	/* XXX */
 
+	memset(&icmp, 0, sizeof(icmp));
 	icmp.icmp_type = ICMP_ECHO;
-	icmp.icmp_code = 0;
-	icmp.icmp_cksum = 0;
-	icmp.icmp_seq = 0;
 	icmp.icmp_id = getpid() & 0xffff;
 
 	icmp.icmp_cksum = wrapsum(checksum((unsigned char *)&icmp,