So it's an openssl bug, there's an unbounded OPENSSL_strlcpy(). Could you guys please give a try to the openssl-1_1 package from https://build.opensuse.org/package/show/home:vitezslav_cizek:branches:security:tls/openssl-1_1? The repository isn't published yet, but hopefully it will be soon. (And you can always build the package yourself).