It would be technically possible but then they would end up having to maintain and offer two sets of every dependency, i.e. apache-ssl101 and apache-ssl102. Also, distros usually freeze what they have, so this would only be of interest for backports or perhaps if there was a need to supply old openssl versions even if a newer one is available before the freeze.<p>The &quot;solution&quot; here is just to wait it out for new major releases of the various distros, and not expect everyone to change core libraries every six months :)