SwiftNIO SSL 2.37.2: Accessing bytes of non-string SAN can lead to out-of-bounds memory read (CVE-2026-43820)

Note: 2.37.2 has been available since 2026-07-15; if you have already updated, no action is needed. Users of SwiftNIO SSL should update to 2.37.2 as soon as practically possible, which addresses the following security issue: NIOSSLCertificate._subjectAlternativeNames read the ASN1_STRING member of BoringSSL's GENERAL_NAME union for every entry without checking the name's type. For the non-string types (otherName, x400Address, directoryName, ediPartyName, registeredID) the union holds a diffe...