OpenBSD erratum 008:
2016-09-22

Avoid unbounded memory growth in libssl, which can be triggered by a TLS client repeatedly renegotiating and sending OCSP Status Request TLS extensions.

binpatch60-(amd64)-libssl-1.0.tgz