What is the UnixWare 7D OpenSSL 1.0.2o Package?

The OpenSSL 1.0.2o package is an updated OpenSSL for UnixWare 7D that
addresses the following problems or new features.

Problems Fixed
--------------

  1. Constructed ASN.1 types with a recursive definition could exceed the stack
     (CVE-2018-0739) Severity: Moderate

  2. Incorrect CRYPTO_memcmp on HP-UX PA-RISC (CVE-2018-0733)
     Not applicable to UnixWare.

  3. rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
     Not applicable to UnixWare.

     References
     ==========
     URL for the OpenSSL Security Advisory:
     https://www.openssl.org/news/secadv/20180327.txt

Features Added to OpenSSL 1.0.2o
---------------------------------
  1. security release only. See OpenSSL release notes at
     https://www.openssl.org/news/openssl-1.0.2-notes.html

Features Added to this package
---------------------------------
  1. openssl utilities can handle files larger than 2GB

  2. /etc/ssl/certs/xinuos-ca-bundle.crt certificate bundle is provided
     for your convenience. See text starting at line 210 of that file.

     If /etc/ssl/certs/ca-bundle.crt does not exist at install time,
        xinuos-ca-bundle.crt will be copied to ca-bundle.crt

     Xinuos makes no warranties as to the trustworthiness or RFC 3647
     compliance of the certification authorities whose certificates are
     included in this package.

     Assessment and verification of trust is the complete responsibility
     of the system administrator.

Contents
--------

      openssl-1.0.2o-UnixWare7D-i386.pkg.gz
      openssl-dev-1.0.2o-UnixWare7D-i386.pkg.gz

MD5 (openssl-1.0.2o-UnixWare7D-i386.pkg.gz) = 9b26ca12afe6fed87ed72c4e347179df
MD5 (openssl-dev-1.0.2o-UnixWare7D-i386.pkg.gz) = 2982cb92078137c4cb3561099d47d1aa

SHA256(openssl-1.0.2o-UnixWare7D-i386.pkg.gz)= 3948b6ebf14454a89a9cbf7a1f9d491b05bcea33399d63b44791798cff39cc7d
SHA256(openssl-dev-1.0.2o-UnixWare7D-i386.pkg.gz)= 0cc7c2a8f6312b1ca2c5fc0a449d0533e9f4e27a6bb8f25016c42fbe7ad8a73e

Software Notes and Recommendations
----------------------------------

  The UW7D OpenSSL 1.0.2o package is intended for installation on

        UnixWare 7 Definitive 2018


Installation Instructions
-------------------------

  1. Download openssl-1.0.2o-UnixWare7D-i386.pkg.gz and
     openssl-dev-1.0.2o-UnixWare7D-i386.pkg.gz files to the /tmp directory
     on your machine.

  2. As root, add the package to your system using these commands:

     $ su -
     Password: <type your root password>
     # gzcat /tmp/openssl-1.0.2o-UnixWare7D-i386.pkg.gz | pkgadd -qd - all

     If you develop software using the OpenSSL libraries, install the
     development package.
     # gzcat /tmp/openssl-dev-1.0.2o-UnixWare7D-i386.pkg.gz | pkgadd -qd - all

  3. The system should be rebooted after installing this package to insure
     all the services using the openssl libraries are restarted.

  4. The upgrade process will not modify existing /etc/ssl/openssl.cnf
     settings if modifications have been made. OpenSSL 1.0.2n may have
     modified default option settings as well as have additional options
     than the earlier openSSL being replaced. The default configuration file
     is /etc/ssl/openssl.cnf.dfl. System administrators should review the
     1.0.2n default options and update /etc/ssl/openssl.cnf settings
     accordingly.

Removal Instructions
--------------------

  1. As root, remove the package using these commands:

     $ su -
     Password: <type your root password>
     # pkgrm openssl

  3. Your system does not contain an OpenSSL after removal of this package.

     Note: removing OpenSSL will break OpenSSH and any other software
           linked against the OpenSSL libraries.

  If you have questions regarding this supplement, or the product on
  which it is installed, please contact your Xinuos software supplier.