[Bug 1842383] [NEW] openssl 1.1.1 memory overuse/leak

[Sergey]

Public bug reported:

Hi,

DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=18.04
DISTRIB_CODENAME=bionic
DISTRIB_DESCRIPTION="Ubuntu 18.04.3 LTS"

With dynamic linking libssl1.1 in nginx we see a lot memory use compared
to libssl1.0.

No memory overuse:
ii  libssl1.1:amd64                       1.1.0g-2ubuntu4                   amd64        Secure Sockets Layer toolkit - shared libraries

2,5x memory overuse:
ii  libssl1.1:amd64                       1.1.1-1ubuntu2.1~18.04.4          amd64        Secure Sockets Layer toolkit - shared libraries

After some investigation from nginx team, they build nginx with static
linking openssl with this patch, and this solved memory overuse issue
https://git.openssl.org/?p=openssl.git;a=commitdiff;h=f2bb79a

Can you please fix and rebuild openssl with this patch?

Thanks!

** Affects: openssl (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/1842383

Title:
  openssl 1.1.1 memory overuse/leak

Status in openssl package in Ubuntu:
  New

Bug description:
  Hi,

  DISTRIB_ID=Ubuntu
  DISTRIB_RELEASE=18.04
  DISTRIB_CODENAME=bionic
  DISTRIB_DESCRIPTION="Ubuntu 18.04.3 LTS"

  With dynamic linking libssl1.1 in nginx we see a lot memory use
  compared to libssl1.0.

  No memory overuse:
  ii  libssl1.1:amd64                       1.1.0g-2ubuntu4                   amd64        Secure Sockets Layer toolkit - shared libraries

  2,5x memory overuse:
  ii  libssl1.1:amd64                       1.1.1-1ubuntu2.1~18.04.4          amd64        Secure Sockets Layer toolkit - shared libraries

  After some investigation from nginx team, they build nginx with static
  linking openssl with this patch, and this solved memory overuse issue
  https://git.openssl.org/?p=openssl.git;a=commitdiff;h=f2bb79a

  Can you please fix and rebuild openssl with this patch?

  Thanks!

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1842383/+subscriptions