Thread

Re: BUG #19117: postgresql15-contrib-15.15 for RHEL 9 has conflicting OpenSSL dependencies (3.0.0 and 3.4.0)

Devrim Gündüz <devrim@gunduz.org> — 2025-11-18T16:56:43Z

Hi,

Just an FYI: OpenSSL 3.5 is a part of RHEL 9.7 (and 10.1) update, so RHEL users are not affected unless they are sticking to a minor RHEL  version -- and I covered them with our sysupdates repo. Alma released 9.7 today with OpenSSL 3.5.

FWIW I have a plan to prevent such issues from happpening in the future. It is under peer review now.


Regards, Devrim

On 18 November 2025 15:33:53 GMT+03:00, PG Bug reporting form <noreply@postgresql.org> wrote:
>The following bug has been logged on the website:
>
>Bug reference:      19117
>Logged by:          Dominik Jakubowski
>Email address:      djakubowski@xtm-intl.com
>PostgreSQL version: 15.15
>Operating system:   RHEL 9
>Description:        
>
>I am reporting a dependency breakage in the latest update for PostgreSQL 15
>(15.15-1PGDG) on RHEL 9.
>
>The package postgresql15-contrib-15.15-1PGDG.rhel9.x86_64 has been built
>with a dependency on OPENSSL_3.4.0. However, standard RHEL 9 (and
>derivatives like Rocky/Alma) currently only provide OpenSSL 3.2.2 (providing
>symbols up to OPENSSL_3.2.0).
>
>This prevents the installation or upgrade of PostgreSQL 15 on a standard
>RHEL 9 system.
>Inspecting the RPM requirements confirms that the binary was linked against
>a newer OpenSSL version than is supported by the target OS. It requires both
>the standard RHEL version (3.0.0) and the unavailable version (3.4.0):
>rpm -qR -p postgresql15-contrib-15.15-1PGDG.rhel9.x86_64.rpm | grep OPENSSL
>warning: postgresql15-contrib-15.15-1PGDG.rhel9.x86_64.rpm: Header V4
>RSA/SHA256 Signature, key ID 08b40d20: NOKEY
>libcrypto.so.3(OPENSSL_3.0.0)(64bit)
>libcrypto.so.3(OPENSSL_3.4.0)(64bit)
>