According to LibreSSL developers, #OpenSSL 4.1 has silently introduced an undocumented major breaking change to no longer NUL-terminate ASN.1 strings, in a minor release.
"This will cause buffer overreads left and right."
Timeline
Post
Remote status
Replies
1