diff --git a/ldns.yaml b/ldns.yaml
index 814a7a1a87c..65b904b6cd9 100644
--- a/ldns.yaml
+++ b/ldns.yaml
@@ -1,7 +1,7 @@
 package:
   name: ldns
   version: "1.9.0"
-  epoch: 0
+  epoch: 1
   description: Lowlevel DNS(SEC) library
   copyright:
     - license: BSD-3-Clause
@@ -16,7 +16,7 @@ environment:
       - ca-certificates-bundle
       - libpcap-dev
       - libtool
-      - openssl-dev
+      - openssl-hardened-dev
       - perl
 
 pipeline:
diff --git a/libarchive.yaml b/libarchive.yaml
index 79ac90054b5..729d3abf4a6 100644
--- a/libarchive.yaml
+++ b/libarchive.yaml
@@ -1,7 +1,7 @@
 package:
   name: libarchive
   version: "3.8.4"
-  epoch: 0
+  epoch: 1
   description: "multi-format archive and compression library"
   copyright:
     - license: BSD-2-Clause
@@ -17,7 +17,7 @@ environment:
       - ca-certificates-bundle
       - expat-dev
       - lz4-dev
-      - openssl-dev
+      - openssl-hardened-dev
       - wolfi-base
       - xz-dev
       - zlib-dev
@@ -57,7 +57,7 @@ subpackages:
       runtime:
         - bzip2-dev
         - lz4-dev
-        - openssl-dev
+        - openssl-hardened-dev
         - xz-dev
         - zlib-dev
         - zstd-dev
diff --git a/libmamba.yaml b/libmamba.yaml
index c144b427894..e3823058351 100644
--- a/libmamba.yaml
+++ b/libmamba.yaml
@@ -1,7 +1,7 @@
 package:
   name: libmamba
   version: "2.4.0"
-  epoch: 0
+  epoch: 1
   description: Cross-Platform Package Manager
   copyright:
     - license: BSD-3-Clause
@@ -36,7 +36,7 @@ environment:
       - libsolv-dev
       - make
       - nlohmann-json
-      - openssl-dev
+      - openssl-hardened-dev
       - py3-supported-distro
       - py3-supported-pip
       - py3-supported-pybind11
diff --git a/libnvme.yaml b/libnvme.yaml
index f9eb7ff4222..84e69e2f8fc 100644
--- a/libnvme.yaml
+++ b/libnvme.yaml
@@ -1,7 +1,7 @@
 package:
   name: libnvme
   version: "1.16.1"
-  epoch: 0
+  epoch: 1
   description: C Library for NVM Express on Linux
   copyright:
     - license: LGPL-2.1-or-later
@@ -16,7 +16,7 @@ environment:
       - keyutils-dev
       - meson
       - ninja
-      - openssl-dev
+      - openssl-hardened-dev
       - python3
       - python3-dev
       - swig
diff --git a/libqcow.yaml b/libqcow.yaml
index ceaec7d8eef..6f63e140cdb 100644
--- a/libqcow.yaml
+++ b/libqcow.yaml
@@ -1,7 +1,7 @@
 package:
   name: libqcow
   version: "20240308"
-  epoch: 3
+  epoch: 4
   description: "Library to access the QEMU Copy-On-Write (QCOW) image file format"
   copyright:
     - license: LGPL-3.0 AND GPL-3.0
@@ -21,7 +21,7 @@ environment:
       - gettext
       - gettext-dev
       - libtool
-      - openssl-dev
+      - openssl-hardened-dev
       - pkgconf
       - pkgconf-dev
       - wolfi-base
diff --git a/librdkafka.yaml b/librdkafka.yaml
index cb08e3722b8..69ec70ea1d0 100644
--- a/librdkafka.yaml
+++ b/librdkafka.yaml
@@ -1,7 +1,7 @@
 package:
   name: librdkafka
   version: "2.12.1"
-  epoch: 0
+  epoch: 1
   description: "The Apache Kafka C/C++ library"
   copyright:
     - license: BSD-2-Clause
@@ -16,7 +16,7 @@ environment:
       - curl-dev
       - linux-headers
       - lz4-dev
-      - openssl-dev
+      - openssl-hardened-dev
       - rapidjson
       - samurai
       - zlib-dev
@@ -52,7 +52,7 @@ subpackages:
     dependencies:
       runtime:
         - lz4-dev
-        - openssl-dev
+        - openssl-hardened-dev
         - zlib-dev
     description: librdkafka dev
     test:
diff --git a/libsrt.yaml b/libsrt.yaml
index 9b4441a9847..ef8f97de0a3 100644
--- a/libsrt.yaml
+++ b/libsrt.yaml
@@ -1,7 +1,7 @@
 package:
   name: libsrt
   version: 1.5.4
-  epoch: 4
+  epoch: 5
   description: "Secure Reliable Transport (SRT)"
   copyright:
     - license: MPL-2.0
@@ -14,7 +14,7 @@ environment:
       - ca-certificates-bundle
       - cmake-3
       - openssl
-      - openssl-dev
+      - openssl-hardened-dev
       - wolfi-base
 
 pipeline:
diff --git a/libssh2.yaml b/libssh2.yaml
index 513b5675dd8..226927b74c5 100644
--- a/libssh2.yaml
+++ b/libssh2.yaml
@@ -1,7 +1,7 @@
 package:
   name: libssh2
   version: 1.11.1
-  epoch: 1
+  epoch: 2
   description: "A library implementing the SSH2 protocol as defined by Internet Drafts"
   copyright:
     - license: BSD-3-Clause
@@ -14,7 +14,7 @@ environment:
       - busybox
       - ca-certificates-bundle
       - libtool
-      - openssl-dev
+      - openssl-hardened-dev
       - wolfi-baselayout
 
 pipeline:
diff --git a/lighttpd.yaml b/lighttpd.yaml
index 71b3b7da229..9c07498e671 100644
--- a/lighttpd.yaml
+++ b/lighttpd.yaml
@@ -1,7 +1,7 @@
 package:
   name: lighttpd
   version: "1.4.82"
-  epoch: 0
+  epoch: 1
   description: Secure, fast, compliant and very flexible web-server
   copyright:
     - license: BSD-3-Clause
@@ -28,7 +28,7 @@ environment:
       - lua5.4-dev
       - m4
       - openldap-dev
-      - openssl-dev
+      - openssl-hardened-dev
       - pcre-dev
       - pcre2-dev
       - pkgconf-dev
diff --git a/linkerd2.yaml b/linkerd2.yaml
index 6eedaf58a25..5fed6dfafcb 100644
--- a/linkerd2.yaml
+++ b/linkerd2.yaml
@@ -1,7 +1,7 @@
 package:
   name: linkerd2
   version: "25.12.1"
-  epoch: 1
+  epoch: 2
   description: "meta linkerd package"
   copyright:
     - license: Apache-2.0
@@ -20,7 +20,7 @@ environment:
       - clang
       - cmake
       - nodejs
-      - openssl-dev
+      - openssl-hardened-dev
       - perl-dev
       - rust
       - yarn