OpenBSD erratum 027:
2016-09-22

Avoid unbounded memory growth in libssl, which can be triggered by a TLS client repeatedly renegotiating and sending OCSP Status Request TLS extensions.

binpatch59-(amd64)-libssl-1.0.tgz