OpenSSL 3.1.0 and OpenSSH

Sam James <[email protected]> Wed, 15 Mar 2023 04:16:49 +0000

Newsgroups	dev.linux.lists.distributions
Message-ID	<[email protected]>

Hi folks,

OpenSSH currently has an overly restrict version check
for the runtime OpenSSL version vs the built-against-version,
so if you upgrade from e.g. openssl 3.0.x -> openssl 3.1.x
without rebuilding openssh (and you shouldn't need to, as
3.1.x is ABI compatible with 3.0.x), you'll get:

```
$ ssh -V
OpenSSL version mismatch. Built against 30000080, you have 30100000
```

I've reported a bug upstream and they're already on it, but
an FYI to avoid breaking your (or possibly other peoples' ;))
systems.

Upstream bug is https://bugzilla.mindrot.org/show_bug.cgi?id=3548.

best,
sam

signature.asc (application/pgp-signature, 377 B)