FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

LibreSSL -- Multiple vulnerabilities

Affected packages
	libressl	<	4.3.3
	libressl-devel	<	4.3.3

Details

VuXML ID	85bcb950-c0b4-11f1-a6ea-8447094a420f
Discovery	2026-10-04
Entry	2026-10-05

The LibreSSL project reports:

Ensure verify callbacks always returning 1 can see a hostname mismatch

Correct botched size check in dtls1_preprocess_fragment()

Limit size of buffered DTLS handshake messages

Avoid potential overread on interrupted retransmission in DTLS

Fix OCSP responder authorization bypass in libtls and ocspcheck(8)

[source]

References

URL	https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-4.3.3-relnotes.txt