untrusted comment: verify with openbsd-80-base.pub
RWSMSt0erHTctdG3YofX7kjTPROT53Ih22HVhhjxKvRI95aaBBUZZN4X0yGcmUy1z8tkb3uzauxPtj8cUxr9uuAmj2SSWek8hAs=

OpenBSD 8.0 errata 015, November 14, 2026:

Fix a buffer overflow in the libc stub DNS resolver.

Apply by doing:
    signify -Vep /etc/signify/openbsd-80-base.pub -x 015_libcasr.patch.sig \
        -m - | (cd /usr/src && patch -p0)

And then rebuild and install libc and statically linked programs:
    cd /usr/src/lib/libc
    make obj
    make
    make install
    cd /usr/src/bin/mt
    make obj
    make
    make install
    cd /usr/src/sbin/dump
    make obj
    make
    make install
    cd /usr/src/sbin/ifconfig
    make obj
    make
    make install
    cd /usr/src/sbin/ipsecctl
    make obj
    make
    make install
    cd /usr/src/sbin/mount_nfs
    make obj
    make
    make install
    cd /usr/src/sbin/pfctl
    make obj
    make
    make install
    cd /usr/src/sbin/ping
    make obj
    make
    make install
    cd /usr/src/sbin/restore
    make obj
    make
    make install
    cd /usr/src/sbin/route
    make obj
    make
    make install
    cd /usr/src/sbin/umount
    make obj
    make
    make install
    cd /usr/src/usr.bin/bgplg
    make obj
    make
    make install

Index: lib/libc/asr/asr_utils.c
===================================================================
RCS file: /cvs/src/lib/libc/asr/asr_utils.c,v
diff -u -p -r1.23 asr_utils.c
--- lib/libc/asr/asr_utils.c	25 Jun 2026 19:27:51 -0000	1.23
+++ lib/libc/asr/asr_utils.c	7 Nov 2026 10:24:33 -0000
@@ -247,7 +247,7 @@ unpack_dname(struct asr_unpack *p, char 
 		p->err = EINVAL;
 		return (-1);
 	}
-	if (e < 0 || e > MAXDNAME) {
+	if (e < 0 || e > MAXCDNAME) {
 		p->err = ERANGE;
 		return (-1);
 	}