Errata patches for the X server have been released for OpenBSD 6.7 and 6.8.
Input validation failures in X server XInput extension can lead to privileges elevations for authorized clients. Binary updates for the amd64, i386, and arm64 platforms are available via the syspatch utility. Source code patches can be found on the respective errata page: https://www.openbsd.org/errata67.html https://www.openbsd.org/errata68.html