Debian Linux Security Advisory 4475-1 - Joran Dirk Greef discovered that overly long nonces used with ChaCha20-Poly1305 were incorrectly processed and could result in nonce reuse. This doesn't affect OpenSSL-internal uses of ChaCha20-Poly1305 such as TLS.
8a82295f693a8e02f4a20371589e94ce9f7cfe37f66852ba85d462dce1da820d