Yes

This bug actually is present for OpenSSL before 0.9 too, but most notably I
just added it for version strings made for OpenSSL 0.9.6 and later!

Sorry for the inconvenience!

diff -u -r1.10 version.c
--- version.c 2001/04/06 08:48:42 1.10
+++ version.c 2001/04/23 07:52:07
@@ -41,6 +41,7 @@
 #if (SSLEAY_VERSION_NUMBER >= 0x906000)
   {
     char sub[2];
+ sub[1]=0;
     if(SSLEAY_VERSION_NUMBER&0xff0) {
       sub[0]=((SSLEAY_VERSION_NUMBER>>4)&0xff) + 'a' -1;
     }
@@ -63,6 +64,7 @@
 #else
   {
     char sub[2];
+ sub[1]=0;
     if(SSLEAY_VERSION_NUMBER&0x0f) {
       sub[0]=(SSLEAY_VERSION_NUMBER&0x0f) + 'a' -1;
     }

-- 
  Daniel Stenberg -- curl project maintainer -- http://curl.haxx.se/