http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 http://bugzilla.opensuse.org/show_bug.cgi?id=1135550#c1 Namor Barcode changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |z1trus@gmx.com --- Comment #1 from Namor Barcode --- Created attachment 805439 --> http://bugzilla.opensuse.org/attachment.cgi?id=805439&action=edit krunner stderr to konsole Also crashes: - Kate crashes during start - Claws-mail start, but when click "Get mail" button - crashes. - Krunner start, but when trying to type anything in search field - crashes. Output in attachment. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 http://bugzilla.opensuse.org/show_bug.cgi?id=1135550#c3 --- Comment #3 from Igor Kuznetsov --- this is about problem in libopenssl. what helps: zypper in tumbleweed-cli tumbleweed init tumbleweed switch 20190514 zypper ref zypper dup -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 http://bugzilla.opensuse.org/show_bug.cgi?id=1135550#c4 Konstantin Voinov changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |kill_it@mail.ru --- Comment #4 from Konstantin Voinov --- Confirm. Temporary solution is revert to prev. snapshot or just to libopenssl1-1.1.0h -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 Илья Индиго changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ilya@ilya.pp.ua -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 http://bugzilla.opensuse.org/show_bug.cgi?id=1135550#c7 --- Comment #7 from Илья Индиго --- Tell me please, if there is a way to fork a specific revision in OBS? I'm trying to fork the 18th revision of openssl-1_1 https://build.opensuse.org/package/show/security:tls/openssl-1_1?expand=0&rev=18 But I get the message - Package has no source revision yet. It remains possible to download 41 files and then create a new package by downloading this 41 files, but perhaps there is a more convenient way to do this? -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 http://bugzilla.opensuse.org/show_bug.cgi?id=1135550#c9 --- Comment #9 from Vítězslav Čížek --- (In reply to Илья Индиго from comment #7)

Tell me please, if there is a way to fork a specific revision in OBS?

# osc branch -r rev prj/pkg

I'm trying to fork the 18th revision of openssl-1_1 https://build.opensuse.org/package/show/security:tls/openssl- 1_1?expand=0&rev=18

Branch of the revision fails for me as well, but because of a conflict in spec. But you can still branch the 1.1.0 openssl from Factory directly with: # osc branch -c -r 5 --nodevelproject openSUSE:Factory/openssl-1_1 -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 http://bugzilla.opensuse.org/show_bug.cgi?id=1135550#c11 Vítězslav Čížek changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |w01dnick@gmail.com --- Comment #11 from Vítězslav Čížek --- *** Bug 1135635 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 http://bugzilla.opensuse.org/show_bug.cgi?id=1135550#c12 --- Comment #12 from Konstantin Voinov --- here backtrace from mc: Program received signal SIGSEGV, Segmentation fault. 0x00007ffff7b4181a in pthread_rwlock_unlock () from /lib64/libpthread.so.0 (gdb) bt #0 0x00007ffff7b4181a in pthread_rwlock_unlock () from /lib64/libpthread.so.0 #1 0x00007ffff773afb9 in CRYPTO_THREAD_unlock () from /usr/lib64/libcrypto.so.1.1 #2 0x00007ffff76b2b98 in ERR_load_ERR_strings () from /usr/lib64/libcrypto.so.1.1 #3 0x00007ffff76b3d29 in ?? () from /usr/lib64/libcrypto.so.1.1 #4 0x00007ffff76d1c29 in ?? () from /usr/lib64/libcrypto.so.1.1 #5 0x00007ffff7b439d7 in __pthread_once_slow () from /lib64/libpthread.so.0 #6 0x00007ffff773b009 in CRYPTO_THREAD_run_once () from /usr/lib64/libcrypto.so.1.1 #7 0x00007ffff76d2113 in OPENSSL_init_crypto () from /usr/lib64/libcrypto.so.1.1 #8 0x00007ffff76b323e in ERR_get_state () from /usr/lib64/libcrypto.so.1.1 #9 0x00007ffff76b3369 in ERR_clear_error () from /usr/lib64/libcrypto.so.1.1 #10 0x00007ffff76d1b19 in ?? () from /usr/lib64/libcrypto.so.1.1 #11 0x00007ffff7b439d7 in __pthread_once_slow () from /lib64/libpthread.so.0 #12 0x00007ffff773b009 in CRYPTO_THREAD_run_once () from /usr/lib64/libcrypto.so.1.1 #13 0x00007ffff76d233b in OPENSSL_init_crypto () from /usr/lib64/libcrypto.so.1.1 #14 0x00007ffff76413c8 in ?? () from /usr/lib64/libcrypto.so.1.1 #15 0x00007ffff76d1bb0 in ?? () from /usr/lib64/libcrypto.so.1.1 #16 0x00007ffff7b439d7 in __pthread_once_slow () from /lib64/libpthread.so.0 #17 0x00007ffff773b009 in CRYPTO_THREAD_run_once () from /usr/lib64/libcrypto.so.1.1 #18 0x00007ffff76d2250 in OPENSSL_init_crypto () from /usr/lib64/libcrypto.so.1.1 #19 0x00007ffff7ca8bd4 in libssh2_init () from /usr/lib64/libssh2.so.1 #20 0x000055555560dbdb in ?? () #21 0x00005555555b829f in ?? () #22 0x00005555555beaa7 in ?? () #23 0x00005555555761e6 in ?? () #24 0x00007ffff7994b7b in __libc_start_main () from /lib64/libc.so.6 #25 0x000055555557687a in ?? () -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 http://bugzilla.opensuse.org/show_bug.cgi?id=1135550#c13 Vítězslav Čížek changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CONFIRMED --- Comment #13 from Vítězslav Čížek --- What I found curious was that everybody who encountered the crashes had Russian sounding name. And indeed, when I set LC_MESSAGES to ru_RU, I can suddenly reproduce the crash :-) # export LC_MESSAGES=ru_RU.UTF-8 # kate KCrash: Application 'kate' crashing... -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 http://bugzilla.opensuse.org/show_bug.cgi?id=1135550#c14 --- Comment #14 from Vítězslav Čížek --- The openssl-fix-handling-of-GNU-strerror_r.patch which got merged upstream (https://github.com/openssl/openssl/commit/e3b35d2b29e9446af83fcaa534e67e7b04...) seems to be the cause of the trouble -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 http://bugzilla.opensuse.org/show_bug.cgi?id=1135550#c16 --- Comment #16 from Vítězslav Čížek --- So it's an openssl bug, there's an unbounded OPENSSL_strlcpy(). Could you guys please give a try to the openssl-1_1 package from https://build.opensuse.org/package/show/home:vitezslav_cizek:branches:securi... The repository isn't published yet, but hopefully it will be soon. (And you can always build the package yourself). -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 http://bugzilla.opensuse.org/show_bug.cgi?id=1135550#c17 --- Comment #17 from Vítězslav Čížek --- (In reply to Vítězslav Čížek from comment #16)

Could you guys please give a try to the openssl-1_1 package from https://build.opensuse.org/package/show/home:vitezslav_cizek:branches: security:tls/openssl-1_1?

You'll need at least the shared library package libopenssl1_1. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 http://bugzilla.opensuse.org/show_bug.cgi?id=1135550#c19 Aleksey Kontsevich changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |akontsevich@gmail.com --- Comment #19 from Aleksey Kontsevich --- (In reply to Vova Mshanetskiy from comment #18)

I downloaded and installed libopenssl1_1-1.1.1b-39.1.x86_64.rpm from the link and i can confirm that it fixes crashes for me.

Could You give direct download link please? -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 http://bugzilla.opensuse.org/show_bug.cgi?id=1135550#c21 --- Comment #21 from Konstantin Voinov --- Yeah, rpm from Vítězslav Čížek 's repo works fine. However "Download" button gives wrong redirect: https://software.opensuse.org//download.html?project=home%3Avitezslav_cizek%3Abranches%3Asecurity%3Atls&package=openssl-1_1 -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 http://bugzilla.opensuse.org/show_bug.cgi?id=1135550#c23 --- Comment #23 from Konstantin Voinov --- (In reply to Konstantin Voinov from comment #21)

Yeah, rpm from Vítězslav Čížek 's repo works fine.

However "Download" button gives wrong redirect: https://software.opensuse.org//download. html?project=home%3Avitezslav_cizek%3Abranches%3Asecurity%3Atls&package=opens sl-1_1

ok, it still not published -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 http://bugzilla.opensuse.org/show_bug.cgi?id=1135550#c25 --- Comment #25 from Илья Индиго --- Faced the weird behavior of chipper for TLS1.3. https://wiki.openssl.org/index.php/TLS1.3#Ciphersuites openssl ciphers -s -v ECDHE | grep TLSv1.3 TLS_AES_256_GCM_SHA384 TLSv1.3 Kx=any Au=any Enc=AESGCM(256) Mac=AEAD TLS_CHACHA20_POLY1305_SHA256 TLSv1.3 Kx=any Au=any Enc=CHACHA20/POLY1305(256) Mac=AEAD TLS_AES_128_GCM_SHA256 TLSv1.3 Kx=any Au=any Enc=AESGCM(128) Mac=AEAD but openssl ciphers TLS_CHACHA20_POLY1305_SHA256 or openssl ciphers TLS_AES_256_GCM_SHA384 Error in cipher list 140013550158336:error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match:ssl/ssl_lib.c:2549: In Apache SSLCipherSuite TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256 Unable to configure permitted SSL ciphers SSL Library Error: error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match Fatal error initialising mod_ssl, exiting. Is this something I don’t understand, or is it an openssl bug? I want the TLS1.3 chippers to be installed only the necessary and in the wrong order. How to do it? If this is a bug, I will create a separate report. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 http://bugzilla.opensuse.org/show_bug.cgi?id=1135550#c27 --- Comment #27 from Vítězslav Čížek --- Thanks everybody for testing. The fixed package will be submitted soon. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 http://bugzilla.opensuse.org/show_bug.cgi?id=1135550#c29 --- Comment #29 from Илья Индиго --- (In reply to Vítězslav Čížek from comment #28)

(In reply to Илья Индиго from comment #25) SSLCipherSuite TLSv1.3 TLS_AES_256_GCM_SHA384:TLS_AES_128_GCM_SHA256

Thank you again! :-) SSLProtocol TLSv1.3 +TLSv1.2 SSLCipherSuite TLSv1.3 TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384 SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384 This is what I needed! :-) -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 Vítězslav Čížek changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|After last update (kernel |Programs using libopenssl |5.1.2-1, snapshot 20190516) |crash under |several program get |Russian/Ukrainian locales |segmentation fault error |since the update to OpenSSL |(mc, yast, qmmp, |1.1.1b |deadbeef,...) | -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 Dmitry Misharov changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |quarckster@gmail.com -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 http://bugzilla.opensuse.org/show_bug.cgi?id=1135550#c33 Yuriy Chepil changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |oy8oom6r@gmail.com --- Comment #33 from Yuriy Chepil --- So, when fixed openssl will be added to official repository? -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 http://bugzilla.opensuse.org/show_bug.cgi?id=1135550#c35 --- Comment #35 from Yuriy Chepil --- (In reply to Vítězslav Čížek from comment #34)

The fixed package was submitted in https://build.opensuse.org/request/show/704554. The request is being evaluated by a staging project. If it goes right, then it'll be included in the next Tumbleweed snapshot which is released every couple of days.

Thanks for info, because i am trying to update today and the problem is still present. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 http://bugzilla.opensuse.org/show_bug.cgi?id=1135550#c37 --- Comment #37 from Igor Kuznetsov --- Big thanks for fast work. All Russian suse-users inviting for Telegram chat group https://t.me/ru_openSUSE -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 http://bugzilla.opensuse.org/show_bug.cgi?id=1135550#c38 Sergey Krasnikov changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |eer@iie.su --- Comment #38 from Sergey Krasnikov --- Affected by this bug too. For now using workaround with en locale. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1135550 http://bugzilla.opensuse.org/show_bug.cgi?id=1135550#c40 Wolfgang Bauer changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |genetus@yandex.ru --- Comment #40 from Wolfgang Bauer --- *** Bug 1135794 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are on the CC list for the bug.