Originally posted by: appd

I wanted to install git via yum which directed me to upgrade curl. Now post curl upgrade yum is broken.

Curl upgrade did the following

====================================================================
 Package          Arch      Version         Repository         Size
====================================================================
Updating:
 curl             ppc       7.61.1-1        AIX_Toolbox       1.4 M
Installing for dependencies:
 cyrus-sasl       ppc       2.1.26-3        AIX_Toolbox       910 k
 libssh2          ppc       1.8.0-3         AIX_Toolbox       742 k
 openldap         ppc       2.4.46-1        AIX_Toolbox       4.4 M

And yum error is

# yum --version

There was a problem importing one of the Python modules

required to run yum. The error leading to this problem was:

 

   Could not load module /opt/freeware/lib/libcurl.a(libcurl.so.4).

Dependent module /usr/lib/libssl.a(libssl.so.1.0.0) could not be loaded.

The module has an invalid magic number.

Could not load module /opt/freeware/lib/python2.7/site-packages/pycurl.so.

Dependent module /opt/freeware/lib/libcurl.a(libcurl.so.4) could not be loaded.

 

Please install a package which provides this module, or

verify that the module is installed correctly.

 

It's possible that the above module doesn't match the

current version of Python, which is:

2.7.15 (default, Sep 28 2018, 03:58:41)

[GCC 6.3.0]

 

If you cannot solve this problem yourself, please go to

the yum faq at:

  http://yum.baseurl.org/wiki/Faq

Originally posted by: sangameshm

Looks like you have the latest version of openssl.

install the ifix ifix 102p_fix.181127.epkg.Z from the path mentioned in bulletin:
http://aix.software.ibm.com/aix/efixes/security/openssl_advisory29.asc

(mentioned under  " A. FIXES "section )

This will resolve the issue.

Thanks,

Sangamesh

Originally posted by: appd

Thanks @sangameshm

Could you please clarify what is the difference between the two fix pkgs listed below? I mean I've openssl.base(1.0.2.1600)installed so I guess I need to install the first one however just want to understand why there are two packages in the fix tar and what they stand for?

AIX Level           Interim Fix (*.Z)        Fileset Name(prereq for installation) KEY
            --------------------------------------------------------------------------------------------
            5.3, 6.1, 7.1, 7.2  102p_fix.181127.epkg.Z   openssl.base(1.0.2.1600)            key_w_fix
            5.3, 6.1, 7.1, 7.2  fips_102p.181127.epkg.Z  openssl.base(20.16.102.1600)        key_w_fix

Originally posted by: sangameshm

The one with fips is a openssl with FIPS Object Module(validation of a cryptographic module) support.
https://www.openssl.org/docs/fips.html

Originally posted by: appd

Thank you very much !