Wani kwaro a cikin OpenSSL ya karya wasu buɗaɗɗen aikace-aikacen SUSE Tumbleweed bayan sabuntawa

Ana ɗaukaka OpenSSL zuwa sigar 1.1.1b a cikin ma'ajiyar buɗaɗɗen SUSE Tumbleweed jagoranci к cin zarafi aiwatar da wasu aikace-aikacen da ke da alaƙa da libopenssl da yin amfani da yankunan Rashanci ko Ukrainian. Matsalar ta bayyana bayan ƙara ta zuwa OpenSSL canji zuwa mai sarrafa saƙon kuskure (SYS_str_reasons). An bayyana ma'auni a kilobytes 4, amma wannan bai isa ga wasu wuraren Unicode ba.

Fitowar strerror_r, wanda aka yi amfani da shi don cika buffer, shine 6856 bytes don yankin Rasha, da 7000 don yankin Ukrainian. A cikin lambar OpenSSL, da farko. ya kasance duba don ambaliya, amma lokacin da aka yanke wutsiya yayi la'akari Girman ya kasance byte ɗaya ya fi girma na ainihin ƙimar, wanda ya haifar da ambaliya ta byte ɗaya da kuma karo lokacin da ake loda rubutun kuskuren da suka yi tsayi da yawa.

A halin yanzu an riga an shirya gyara, amma har yanzu ba a karba ba. Don komawa zuwa sigar da ta gabata (OpenSSL 1.1.0h) kuna iya aiwatar da umarni masu zuwa:

sudo zypper a cikin tumbleweed-cli
sudo tumbleweed init
sudo tumbleweed canza 20190514
sudo zypper ref && sudo zypper dup && sudo zypper inr

source: budenet.ru