[Bug 297144] base OpenSSL pkg-config files report Version 3.5.1 on stable/14 (actual: 3.0.x)

From: <bugzilla-noreply_at_freebsd.org>
Date: Wed, 29 Jul 2026 13:49:25 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297144

            Bug ID: 297144
           Summary: base OpenSSL pkg-config files report Version 3.5.1 on
                    stable/14 (actual: 3.0.x)
           Product: Base System
           Version: 14.4-RELEASE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: bin
          Assignee: bugs@FreeBSD.org
          Reporter: mnowak@startmail.com

On 14.4-RELEASE-p7 the base system's pkg-config files claim OpenSSL 3.5.1, but
base OpenSSL is 3.0.20:

$ pkg-config --modversion openssl libcrypto libssl
3.5.1
3.5.1
3.5.1
$ grep OPENSSL_VERSION_TEXT /usr/include/openssl/opensslv.h
# define OPENSSL_VERSION_TEXT "OpenSSL 3.0.20 7 Apr 2026"
$ openssl version
OpenSSL 3.0.20 7 Apr 2026

All three files under /usr/libdata/pkgconfig/ (openssl.pc, libcrypto.pc,
libssl.pc) have Version: 3.5.1 while prefix=/usr and libdir=/usr/lib point at
the 3.0.20 headers and libraries.

Impact: any build system using pkg-config for OpenSSL feature detection
silently mis-detects the version. pkg-config --atleast-version=3.2 libcrypto
succeeds on a 3.0 system. Projects that instead read OPENSSL_VERSION_NUMBER
from the header are unaffected, which is why this goes unnoticed.

-- 
You are receiving this mail because:
You are the assignee for the bug.