Errata patches for libx11 and vmd have been released for OpenBSD 6.8 and 6.9.
Request length checks were missing in libX11. vmd guest virtio drivers could cause stack overflows by crafting invalid virtio descriptor lengths. Binary updates for the amd64, i386, and arm64 platforms are available via the syspatch utility. Source code patches can be found on the respective errata page: https://www.openbsd.org/errata68.html https://www.openbsd.org/errata69.html
