OpenBSD's older IKE daemon now exits if its child sends a junk bind
Brief
The mail names a malicious child, not a network packet.
Notes
source-changes (hshoexer, 2026-08-14 08:57:42). Files: sbin/isakmpd/log.h, sbin/isakmpd/monitor.c. “Handle malformed MONITOR_BIND message.” Length checks on the child payload. When a malicious child sends a malformed message the privsep protocol is out of sync, so the parent exits.
Reported by Shibo, Hugo Systopia Team. ok markus@ tb@ deraadt@.
cvsweb monitor.c still listed 1.83 (2023-02-08) as HEAD when this was filed. GitHub and Codeberg had not mirrored it. Do not invent a SHA. Not labeled SECURITY FIX. Not on errata79 as of the file.
Commit msg162761