following my request, OpenSSL just integrated a fix to avoid loading an
engine twice even if the configuration is parsed more than once:
https://github.com/openssl/openssl/commit/9b06ebb1edfddffea083ba36090af7eb7cad207b

Integrating this patch in the existing OpenSSL 1.1.1 package (or at
least packaging the relevant OpenSSL 1.1.1 version that will include it)
will ensure that no additional project will crash if it uses an engine
(such as PKA) and the configuration is parsed twice.

In the long term, this aims to be a robust solution to this double-load
issue, so that instead of playing whack-a-mole on all 3rd party projects
that might load the config twice, the issue will be resolved at OpenSSL
itself.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1921518

Title:
  OpenSSL "double free" error

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/wget/+bug/1921518/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to