Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vKHnL-0062yP-2o for pgsql-pkg-yum@arkaria.postgresql.org; Sat, 15 Nov 2025 15:02:30 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1vKHnI-009XgO-1R for pgsql-pkg-yum@arkaria.postgresql.org; Sat, 15 Nov 2025 15:02:28 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vKHnI-009Xfx-0p for pgsql-pkg-yum@lists.postgresql.org; Sat, 15 Nov 2025 15:02:28 +0000 Received: from ns7.gunduz.org ([165.232.104.158]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vKHnF-007tjJ-35 for pgsql-pkg-yum@lists.postgresql.org; Sat, 15 Nov 2025 15:02:27 +0000 Received: from dell-laptop07.gunduz.org (unknown [95.10.5.226]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ns7.gunduz.org (Postfix) with ESMTPSA id BB2E430001FD for ; Sat, 15 Nov 2025 15:02:24 +0000 (UTC) Message-ID: Subject: Re: Issues with the latest minor updates and Alma/Rocky 9 and 10 From: Devrim =?ISO-8859-1?Q?G=FCnd=FCz?= To: PostgreSQL RPM Packaging Date: Sat, 15 Nov 2025 18:02:20 +0300 In-Reply-To: <447b22b929a2ad86ed21277079d8ad46300b98b5.camel@gunduz.org> References: <447b22b929a2ad86ed21277079d8ad46300b98b5.camel@gunduz.org> Autocrypt: addr=devrim@gunduz.org; prefer-encrypt=mutual; keydata=mQINBFN+TjkBEAC6pudhV1V54kHPe91nr6Erz6VuG93VKfcHOHN86yET35s8ytey7f//m 93mW0X6LJUMbY+Z0BztU4EauGAhYRSFzpBWUVBCxaaSyB+l0FR6WtH/Lv6Sxql0GLs6Uhxsk2v3jJ tMtk+hFAW2TJInW0ab1xxwTiiHFmSnJOBEK7IMlOOu5kfOAILgGOgiyMUPsDf5iTIJ35iX9hqFvmz MueFVwAExTeTkKCRXvuGXrO28Bbesy6h4GbJe1bUaTwTMEBn90oQD20UUKI9Lvo46c1SkqF1nOSoQ A3A2eBjWACq68DQ9Q8TbtkBlL8QKftrFz3SL0jth9ZpxyYfm+jiZ5LEAd717YM7qjvH5Yq0juZO3U jz2L9RVgyIF1lTQ33fQEuGn797n7LxdaQSdOYK88yrpABic6fJs6rxGy86HcNVHJQCfxgu+uU4eG9 /wzBKllXreabD2JJXIRjqvhJTXd7JWaF6TZUEUM0SH2GlA6I2G2vGSyRoe0/jaqUIDGm5drzFGkrK 7CwhWzLqxSBlVkCelhOVfDuyit3ypwPhsztTOgZ9w3iwnAPZWuqXbys2Z26H9hQb5eG7xlkCZwlSr mD8mUdHlU5DP84VPIXX6mGCh0I4EJ4ur61CNESpv86BKfGUpbl/3x9XSmcWfvdxB4JnrjHBm9aDIQ ZzukEJGdiGBpQARAQABtCNEZXZyaW0gR8O8bmTDvHogPGRldnJpbUBndW5kdXoub3JnPokCOQQTAQ IAIwUCU35OOQIbAwcLCQgHAwIBBhUIAgkKCwQWAgMBAh4BAheAAAoJENjDPf6Sz261pAgP/j4OJd8 EfBLcdkeYyWKNVV3xN6KGF5tTo5iLjjIBmxmj7403DoigD4qfXY8UQ1hG1e0vTe+zaBuL+fMmn3Rg SAcUcjNUjVwcOeGFIMO0uMDX4xnMeAahjuc+2EKBFBW0UY21aH6BdmM98GkU/gyBpaMt/MC+5Xgsj 1koqlA9vCj1bnDXVNP7w/MPhVsEGbhkBZFB/vwVDVJ0J1U4vA1pr2ggUGOOv0kXu7r7B7nGQgcxN8 qh8QBgfP4ePzbubdA3oGY3PTmRjWWDAzA7HpnKD9pPiAFxvhmnUVcOCdTCo9mNaJc+kRXP7yGbsQa rOWvLMtCvKa0DjFJ6SDY45h3g1XF+Xp/ZMZLbJ7xNc3zEVnBZc0AIvGL+IlQbo9trPdJvjdrFATio UV/cLxug1p4kl8JB6YMvToiKFmMlpQv2wcKK63bm01lDjU93sAy8oZpeKYlOYlN9D0WmyhJbFTlTl IJhMX0aY/xfxUaMYJC5DxV+9s18uviqGWDb2zQR3i3qUbfzV27yHnKo194rUblZ128CzAjs32NerE CLJjKEpc2Ci14fJZz6c6P0J5JTONBKhAzygQi/l97RGBqsLiniJIsTUjGH+hEr7hTnhEg/ZOQSs32 h9vVjhQB7WJ9Xg9A3Frw5mD+W3YkMMM4bFryLTM5p7E1iwGlx+XeM8UMzhtYt Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-+RHpLl8/DZqMqIO2PQ8n" User-Agent: Evolution 3.58.1 (3.58.1-1.fc43) MIME-Version: 1.0 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --=-+RHpLl8/DZqMqIO2PQ8n Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi, I think I fixed this problem. Rocky Linux / Alma Linux 9 and 10 users please enable sysupdates repo first. You may need a recent repository RPM/configuration (pushed a new repository RPM today as well) . That repo now includes OpenSSL 3.5.1 along with LLVM/CLANG 20, crypto- policies, etc and all of them have PGDG suffix in the package names. My tests were successful on my test boxes. Regards, Devri On Fri, 2025-11-14 at 00:15 +0300, Devrim G=C3=BCnd=C3=BCz wrote: >=20 > We use Red Hat Enterprise Linux to build x86_64 RPMs for RHEL and its > clones. >=20 > Red Hat pushed OpenSSL 3.5 as a part of 10.1 and 9.7 release, and > these > updates did not make into both Rocky and Alma yet. >=20 > Currently latest minor updates built on RHEL 10.1 and 9.7 cannot be > installed on Rocky/Alma 9 and 10 because of this. >=20 > We always had LLVM breakage during RHEL minor updates that was > slightly > easier to deal with and affected very minority of users (and we have > sysupdates repo anyway and there is a plan to fix it permanently for > future), but this OpenSSL update issue is not easy to solve. >=20 > FWIW Rocky/Alma 8 are not affected. >=20 > So this is just a "I know the problem, however currently there is not > much I can do other than waiting for Rocky and Alma to catch up" > email, > but I'm also open to suggestions. >=20 > Regards, --=20 Devrim G=C3=BCnd=C3=BCz Open Source Solution Architect, PostgreSQL Major Contributor BlueSky: @devrim.gunduz.org , @gunduz.org --=-+RHpLl8/DZqMqIO2PQ8n Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- iQJGBAABCgAwFiEEH8GKHNUOKtDEiyD22MM9/pLPbrUFAmkYlfwSHGRldnJpbUBn dW5kdXoub3JnAAoJENjDPf6Sz261vA8P/jJtDHFmbT0PzZ6VzGyLgcNZ1Eu1WoFf 4Qjf2Yuo5F7SVE8RjF0CFDVB26MBlGMh3+OP+lEYJNy4cS6yxb8pxP9middIhaBd JCTt4G9B+UyGMnExcB7kQ4Xcqea0gPzqOM+zne1EQK7s9Oi5AAFmKmjBubxUsLrf kRka8+YrlvdfDuKMlQhvSCOse7iKAujoN85RdDPetl5zjQpdAId4ISGpO0n+9/m1 01hJTgKZRJt24vjO/bdHe4L+Fcucyad5kfi92zqvey3fUIUpKJvTAssgPjCPb49c 8iPBajYxdVYmx4b2706/2aeT7UlY97F8FiY99Qyrno4LrcV/HbqmXRfw9ansfc5X 4ZHKpeU8pDLbbKt92hj1lpmYz3A9+lpdQH8iQy65TY9xsYdK1mcyILV9Y9sFoqa4 CADZtdhB4/sY3L8EQoyIe05oWbVHN3Jfz8R5aQlGb93PhSscBuDwq+vng1LXQc6B 7fco5rI8n/15PUQIfMV3GrUVkWwIEiFsfnz4ukJGUcLZQUOlp6eHhTWTPMi56Og3 0tp/Zt29cpC6rCZrvUQxWxgplzxppPgozo9pBLVPOvju73SbBEtAzGrfJDmQkhJh 4VXpWMiVt5pNCK/6MrMp2jFtQABsELZyr+wbVOMe92nKmTHi+Vl4YmcaXsWpipm/ /djHQjEVFDFV =6RB8 -----END PGP SIGNATURE----- --=-+RHpLl8/DZqMqIO2PQ8n--