Originally posted by: jgruizny

I was testing upgrading to the most recent version of openssl for AIX (1.0.2.1600), and I noticed when I update from version 1.0.2.1500 , yum breaks with the following error:

# yum update
There was a problem importing one of the Python modules
required to run yum. The error leading to this problem was:

        0509-022 Cannot load module /opt/freeware/lib/libcurl.a(libcurl.so.4).
        0509-150   Dependent module /usr/lib/libssl.a(libssl.so.1.0.0) could not be loaded.
        0509-103   The module has an invalid magic number.
        0509-022 Cannot load module /opt/freeware/lib/python2.7/site-packages/pycurl.so.
        0509-150   Dependent module /opt/freeware/lib/libcurl.a(libcurl.so.4) could not be loaded.

Please install a package which provides this module, or
verify that the module is installed correctly.

It's possible that the above module doesn't match the
current version of Python, which is:
2.7.15 (default, Sep 28 2018, 03:58:41)
[GCC 6.3.0]

If you cannot solve this problem yourself, please go to
the yum faq at:
  http://yum.baseurl.org/wiki/Faq

# rpm -qa | grep yum
yum-metadata-parser-1.1.4-2.ppc
yum-3.4.3-5.noarch

Any suggestions?

Originally posted by: sangameshm

It's a known issue in openssl and the fix will be available soon.

Will update you once the fix is available.

Thanks,

Sangamesh

Originally posted by: Shaell

Is there a fix available yet? We ran across same. After patch, nagios monitoring agent will not come up.

Could not load program ./nrpe:
        Dependent module /usr/lib/libssl.a(libssl.so.1.0.0) could not be loaded.
        The module has an invalid magic number.

Originally posted by: eclypse

Edit (11-Dec-2018 @12:45pm): just saw this a few minutes ago and it looks like it resolves the issue:

IBM My Notifications: https://aix.software.ibm.com/aix/efixes/security/openssl_advisory29.asc

Also hoping for an update here - this issue is almost two weeks old - even though the release notes say they were updated last Friday.

At the very least, it would be a fantastic idea to update the OpenSSL release notes on the IBM AIX Web Download Pack site to say it breaks yum.

Any workaround for this?

Originally posted by: SandeepUmesh

Hello

Along with openssl.base 1.0.2.1600 VRMF, please also install ifix 102p_fix.181127.epkg.Z from the path mentioned in bulletin:
http://aix.software.ibm.com/aix/efixes/security/openssl_advisory29.asc

(mentioned under  " A. FIXES "section )

This will resolve the issue. Thanks

Originally posted by: eclypse

I did install the ifix and it definitely resolves the issue. Still hate those because they do not work with NIM. I don't even have a large environment, but that is _really_ annoying.