A bug in OpenSSL broke some openSUSE Tumbleweed applications after an update

Updating OpenSSL to version 1.1.1b in the openSUSE Tumbleweed repository led к breaking performance of some applications associated with libopenssl and using Russian or Ukrainian locales. The problem appeared after being added to OpenSSL changes to the error message buffer handler (SYS_str_reasons). The buffer was defined as 4 kilobytes, but this was not enough for some unicode locales.

The strerror_r output used to fill the buffer is 6856 bytes for the Russian locale and 7000 for the Ukrainian locale. In the OpenSSL code, initially was check for overflow, but it is when the tail is cut took into account the size is one byte larger than the actual value, which resulted in a one-byte overflow and a crash when loading too long error code transcripts.

Already prepared correctionbut it hasn't been accepted yet. To roll back to the previous stable version (OpenSSL 1.1.0h), you can run the following commands:

sudo zypper in tumbleweed-cli
sudo tumbleweed init
sudo tumbleweed switch 20190514
sudo zypper ref && sudo zypper dup && sudo zypper inr

Source: opennet.ru