OpenBSD erratum 017:
2017-02-02

A bug in the processing of range headers in httpd can lead to memory exhaustion. This patch disables range header processing.

binpatch60-(amd64|i386)-httpd-1.0.tgz