[FREEBSD:425B9538-CE5F-11ED-ADE3-D4C9EF517024] OpenSSL -- Multiple vulnerabilities

The OpenSSL project reports:

  Severity: low
  Applications that use a non-default option when verifying certificates may be
    vulnerable to an attack from a malicious CA to circumvent certain checks.
  The function X509_VERIFY_PARAM_add0_policy() is documented to
    implicitly enable the certificate policy check when doing certificate
    verification. However the implementation of the function does not
    enable the check which allows certificates with invalid or incorrect
    policies to pass the certificate verification.