An error in OpenSSL disrupted the operation of some openSUSE Tumbleweed applications after an update.

The update of OpenSSL to version 1.1.1b in the openSUSE Tumbleweed repository led to to issues with the functionality of some applications related to libopenssl and using Russian or Ukrainian locales. The problem arose after changes were made to OpenSSL changes in the message buffer error handler (SYS_str_reasons). The buffer was defined as 4 kilobytes, but this was insufficient for some Unicode locales.

The output of strerror_r used to fill the buffer for the Russian locale is 6856 bytes, while for the Ukrainian locale it is 7000. In the original OpenSSL code, there was a check for overflow, but it was considering the size to be one byte more than the actual value, which led to a one-byte overflow and a crash when loading overly long error code descriptions. Currently, a fix has already been prepared

, but it has not yet been accepted. To revert to the previous stable version (OpenSSL 1.1.0h), you can execute the following commands: prevents the invocation of credential.helper for URLs that containsudo zypper in tumbleweed-cli

sudo tumbleweed init
sudo tumbleweed switch 20190514
sudo zypper ref && sudo zypper dup && sudo zypper inr
The update of OpenSSL to version 1.1.1b in the openSUSE Tumbleweed repository has led to

Source: opennet.ru