OpenSSL 3.0.7 fixes X.509 email address buffer overflows
> An off by one error in the punycode decoder allowed for a single unsigned int
overwrite of a buffer which could cause a crash and possible code execution.<p><a href="https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332" rel="nofollow">https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b...</a><p>A one character change.