This release is based on LibreSSL 3.8.1:
https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.8.1-relnotes.txt
The relevant changes since 3.7.0 are copied below:
* New features
- Added a workaround for a poorly thought-out change in OpenSSL 3 that
broke privilege separation support in libtls.
* Bug fixes
- Fixed error handling in tls_check_common_name().
* Internal improvements
- Improved checks for commonName in libtls.
- Fixed error check for X509_get_ext_d2i() failure in libtls.
A release tarball for this version can be downloaded from:
https://causal.agency/libretls/libretls-3.8.1.tar.gz