Bug 2375853 - clamav-devel and openssl 3.4.0
Summary: clamav-devel and openssl 3.4.0
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora EPEL
Classification: Fedora
Component: clamav
Version: epel10
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Orion Poplawski
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
: 2376108 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-07-02 07:32 UTC by Phil
Modified: 2025-10-27 13:29 UTC (History)
14 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2025-10-22 02:12:49 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Phil 2025-07-02 07:32:46 UTC
Description of problem:
I was trying to compile cyrus-imapd 3.10.1 with clamav support, but the build failed with an undefined reference to EVP_MD_CTX_get_size_ex.0.
Where does this come from? afaik el10 does not provide openssl > 3.2.


Version-Release number of selected component (if applicable):
1.4.3-1.el10_1

How reproducible:
always

Steps to Reproduce:
1. try compiling cyrus-imapd with clamav support

Actual results:
/usr/bin/ld: /usr/lib64//libclamav.so: undefined reference to `EVP_MD_CTX_get_size_ex.0'

Expected results:
no errors

Additional info:
$ objdump -p /usr/lib64/libclamav.so | grep OPENSSL
    0x06702f20 0x00 45 OPENSSL_3.4.0
    0x06702b20 0x00 15 OPENSSL_3.0.0
$ objdump -T /usr/lib64/libclamav.so | grep EVP_MD_get_size
0000000000000000      DF *UND*	0000000000000000 (OPENSSL_3.0.0) EVP_MD_get_size

Comment 1 Gwyn Ciesla 2025-07-03 17:40:12 UTC
*** Bug 2376108 has been marked as a duplicate of this bug. ***

Comment 2 adam winberg 2025-10-20 11:24:24 UTC
Any update here? Installing clamav-lib forces a downgrade of openssl on RHEL10 because of a dependency to libcrypto.so.3(OPENSSL_3.4.0)(64bit)

Comment 3 Jan ONDREJ 2025-10-20 11:30:49 UTC
I don't think this is a clamav problem. May be you should build against epel10z (epel 10.0) instead of epel 10.1. According to release 1.4.3-1.el10_1 you are using an clamav for epel 10.1, which has not been released yet.

Comment 4 adam winberg 2025-10-20 11:40:23 UTC
In my case I try to install from the 'fedora-epel/10/' repo, is this not compatible with RHEL 10?
Do I have to explicitly use the EPEL repo corresponding to the current RHEL minor version (i.e fedora-epel/10.0/)?

Comment 5 Jan ONDREJ 2025-10-20 11:46:00 UTC
Starting with EPEL10, this is the directory structure of mirrors:

10 -> 10.2/
10z -> 10.0/
10.0/
10.0z -> 10.0/
10.1/
10.1z -> 10.1/
10.2/
10.2z -> 10.2/

So 10 is pointing to 10.2, 10z is current stable (10.0). Do not ask me, why, I don't like this too.

Your /etc/yum.repos.d/epel.repo should contain this row:

metalink=https://mirrors.fedoraproject.org/metalink?repo=epel${releasever_minor:+-z}-$releasever&arch=$basearch

As you can see, there is an "z" in metalink URL, so your system should automatically find EPEL 10.0, if releasever_minor isn't set.

Comment 6 adam winberg 2025-10-20 12:19:51 UTC
ok, i'm using Pulp so I just specified the url as I always do. Using '10' does seem like the most obvious choice but then I should use '10z' instead, check. 
Thanks for clearing this up!

Comment 7 Mihai Vintila 2025-10-27 13:29:50 UTC
actually this is an issue inside clamav both epel and epelz starting from 10.1 have this issue :

rpm -Uv https://mirror.eu.4psacloud.com/epel/10.2z/Everything/x86_64/Packages/c/clamav-1.4.3-1.el10_1.x86_64.rpm --force --nodeps
Retrieving https://mirror.eu.4psacloud.com/epel/10.2z/Everything/x86_64/Packages/c/clamav-1.4.3-1.el10_1.x86_64.rpm
Verifying packages...
Preparing packages...
clamav-1.4.3-1.el10_1.x86_64
[root@15237a58179f /]# objdump -p /usr/lib64/libclamav.so | grep OPENSSL
    0x06702f20 0x00 45 OPENSSL_3.4.0
    0x06702b20 0x00 15 OPENSSL_3.0.0
[root@15237a58179f /]#


Only one without an issue is from epel10.0z which won't be installed as mirror  considers the releasever_minor as well.


Note You need to log in before you can comment on or make changes to this bug.