Classification: UNCLASSIFIED Caveats: FOUO Hello CSW Users,
Stupid question. I saw the RSS feed for the following announcement: http://www.opencsw.org/2014/08/yet-another-openssl-security-update/ "Versions 0.9.8zb and 1.0.1i have landed in the unstable catalog. Thanks, Yann!" My company is requiring us to upgrade our OpenSSL from 1.0.1h to 1.0.1i. On our SPARC Solaris 10 server, I ran the following commands: # /opt/csw/bin/pkgutil -U => Fetching new catalog and descriptions (http://mirror.opencsw.org/opencsw/testing/sparc/5.10) if available ... ==> 3712 packages loaded from /var/opt/csw/pkgutil/catalog.mirror.opencsw.org_opencsw_testing_sparc_5.10 # /opt/csw/bin/pkgutil -a CSWopenssl-utils common package catalog size openssl_utils CSWopenssl-utils 1.0.1h,REV=2014.06.06 1.1 MB # /opt/csw/bin/pkgutil -y -i CSWopenssl-utils Solving needed dependencies ... Solving dependency order ... 3 CURRENT packages: CSWcas-preserveconf-1.49,REV=2013.03.13 CSWcommon-1.5,REV=2010.12.11 CSWlibssl1-0-0-1.0.1h,REV=2014.06.06 Install 2 NEW packages: CSWisaexec-0.2,REV=2009.03.26 (opencsw/testing) CSWopenssl-utils-1.0.1h,REV=2014.06.06 (opencsw/testing) Total size: 1.1 MB => Fetching CSWisaexec-0.2,REV=2009.03.26 (1/2) ... => Fetching CSWopenssl-utils-1.0.1h,REV=2014.06.06 (2/2) ... => Installing CSWisaexec-0.2,REV=2009.03.26 (1/2) ... This interesting packaging hack is copyrighted by Philip Brown, [email protected] You may copy, install, and otherwise redistribute this package as you like, without having to pay any fee, so long as it remain unchanged, and this notice remain intact as the copyright notice. Copying /usr/lib/isaexec to /opt/csw/bin/isaexec Installation of <CSWisaexec> was successful. => Installing CSWopenssl-utils-1.0.1h,REV=2014.06.06 (2/2) ... Please see /opt/csw/share/doc/openssl_utils/license for license information. Copying sample config to /etc/opt/csw/ssl/openssl.cnf Installation of <CSWopenssl-utils> was successful. # /opt/csw/bin/openssl version OpenSSL 1.0.1h 5 Jun 2014 So, my question is, how do I get the CSW "pkgutil" command to point to the "unstable catalog" that the RSS feed mentioned so that I can get the "openssl version" command to output "1.0.1i"? Thanks ahead of time as this service is a god-send for us! - Daniel Classification: UNCLASSIFIED Caveats: FOUO
