Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 940708 - mail-mta/postfix-3.9.0: warning: run-time library vs. compile-time header version mismatch: OpenSSL 3.3.0 may not be compatible with OpenSSL 3.0.0
Summary: mail-mta/postfix-3.9.0: warning: run-time library vs. compile-time header ver...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Eray Aslan
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-10-03 10:56 UTC by honeymak
Modified: 2024-10-06 10:32 UTC (History)
5 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
postfix warning openssl version msg (openssl_postfix.log,143.98 KB, text/plain)
2024-10-03 10:57 UTC, honeymak
Details

Note You need to log in before you can comment on or make changes to this bug.
Description honeymak 2024-10-03 10:56:43 UTC
what i did: since auto rebuild of postfix is not triggered, i did emerge again postfix

what i try to mean: any dep calculation in openssl? is this only postfix warning? do i need in general rebuild the whole world? see if any openssl update verbal msg after emerge?or any eselect news mention about this? see if any useful/meaningful action can be taken, if can be automagically

Reproducible: Always

Actual Results:  
warning: run-time library vs. compile-time header version mismatch: OpenSSL 3.3.0 may not be compatible with OpenSSL 3.0.0
Comment 1 honeymak 2024-10-03 10:57:35 UTC
Created attachment 904819 [details]
postfix warning openssl version msg

postfix log msg about openssl version change
Comment 2 Eray Aslan gentoo-dev 2024-10-04 06:59:04 UTC
no need to do anything for postfix. the warning logic changed to:

	when the OpenSSL library compile-time version
	differs from the run-time version, allow forward-compatible
	minor version differences with OpenSSL >= 3.x.x, allow
	forward-compatible micro version differences with OpenSSL
	1.1.x, and allow no version difference with OpenSSL <=
	1.0.x. Otherwise, log a potential version mismatch warning

in the development version (postfix-3.10) and potentially in the upcoming postfix-3.9 releases

Closing. It is a too-eager warning that is safe to ignore for now
Comment 3 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2024-10-04 23:00:33 UTC
I fear I disagree. It's already led to a few users on IRC and the forums being confused, and it causes unnecessary scares.

Let's just patch it out? It's indeed totally harmless and just a remnant of the old OpenSSL versioning scheme.
Comment 4 Larry the Git Cow gentoo-dev 2024-10-05 07:54:02 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c16397904a998b5f011a6870e9d35d98b21e2e0c

commit c16397904a998b5f011a6870e9d35d98b21e2e0c
Author:     Eray Aslan <eras@gentoo.org>
AuthorDate: 2024-10-05 07:23:47 +0000
Commit:     Eray Aslan <eras@gentoo.org>
CommitDate: 2024-10-05 07:53:39 +0000

    mail-mta/postfix: backport fix for too eager warning
    
    do not log a warning for minor version changes for openssl >= 3.0.0. The
    overall warning logic is:
    
            when the OpenSSL library compile-time version
            differs from the run-time version, allow forward-compatible
            minor version differences with OpenSSL >= 3.x.x, allow
            forward-compatible micro version differences with OpenSSL
            1.1.x, and allow no version difference with OpenSSL <=
            1.0.x. Otherwise, log a potential version mismatch warning
    
    Closes: https://bugs.gentoo.org/940708
    Signed-off-by: Eray Aslan <eras@gentoo.org>

 .../files/openssl-compatibility-warning.patch      |  40 +++
 mail-mta/postfix/postfix-3.9.0-r2.ebuild           | 315 +++++++++++++++++++++
 2 files changed, 355 insertions(+)
Comment 5 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2024-10-06 10:32:34 UTC
Thank you very much!