back to website

Werk #18935: OpenSSL Upgrade Compatibility Fix

Component Linux distributions
Title OpenSSL Upgrade Compatibility Fix
Date Nov 21, 2025
Level Trivial Change
Class Bug Fix
Compatibility Compatible - no manual interaction needed
Checkmk versions & editions
2.5.0b1
Not yet released 		Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)
2.4.0p17 Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)
2.3.0p41 Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)

An OpenSSL upgrade in supported distributions caused several system commands to fail when executed by an OMD site user. This broke the Baking agents feature, which depends on these commands.

To fix this, we now wrap the affected commands to ensure they use the system-supplied OpenSSL library when run by an OMD site user. The wrapped commands are:

  • curl
  • nslookup
  • pdftoppm
  • rpmbuild
  • scp
  • ssh
  • zypper

Users running Baking agents on the following operating systems may have experienced failures due to this issue:

  • SLES 15 SP5, 15 SP6, 15 SP7
  • RHEL 9, 10
  • Debian 13

With this update, these commands will function correctly under the OMD site user, restoring Baking agents functionality without requiring any user intervention.

To the list of all Werks