I submitted a Pull Request to update MacPorts' LibreSSL to 4.4.0 here:

https://github.com/macports/macports-ports/pull/35895

GitHub Continuous Checks are running.

Hopefully they'll pass OK?

If so, it's up to someone else with commit access to merge it.

This release contains the following Security Fix:

Security fix: Removed eMudhra emSign ECC Root CA - G3 from cert.pem
because of weak keys of some subordinate CAs. For purposes of
interoperability, uncompromised intermediates were added.

Upgrade note: Reinstalls no longer overwrite cert.pem, so this may
need a manual merge if your package manager does not take care of
this. 'CN=emSign ECC Root CA - G3' should not appear in cert.pem.

Among others, e.g.

Security and reliability fixes

• Fix parsing issues in X.509 name constraints URI host parsing.

Handle IPv6 literals correctly and don't allow specially crafted
userinfo to bypass host checks.

• Limit size of buffered DTLS handshake messages to avoid overly

large memory consumption on small handshake message fragments.

• Fix an OCSP responder authorization bypass for clients using

tls_config_ocsp_require_stapling(), of which only OpenBSD nc(1)
and ftp(1) are known when they're used with the "muststaple" key
word.

Complete release notes:

https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-4.4.0-relnotes.txt

#LibreSSL #MacPorts #TLS #Security #OpenSSL #macOS