Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-12123

dnf update --security doesn't correctly apply updates to all the available packages.

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Undefined Undefined
    • rhel-9.4
    • rhel-9.3.0
    • libdnf
    • libdnf-0.69.0-7.el9
    • Minor
    • sst_cs_software_management
    • ssg_core_services
    • 10
    • 12
    • QE ack, Dev ack
    • False
    • Hide

      None

      Show
      None
    • Release Note Not Required

      Using the database provided, dnf update --security provides strange results.

      https://file.rdu.redhat.com/~jcastran/03530805/dendvb3utaut21-rpm_db.tar.gz

      ~~~

      1. alias yumr='yum --installroot=/test/ --setopt=tsflags=justdb'
      2. alias rpmr'rpm --root=/test/'
      3. mkdir /test/
      4. tar xf dendvb3utaut21-rpm_db.tar.gz -C /test/
      5. rpmr -q libnsl glibc
        libnsl-2.28-164.el8_5.3.i686
        libnsl-2.28-164.el8_5.3.x86_64
        glibc-2.28-164.el8_5.3.x86_64
        glibc-2.28-164.el8_5.3.i686
      1. yumr updateinfo list --security --all | grep -E 'glibc-2|libnsl'
        i RHSA-2020:1828 Low/Sec. glibc-2.28-101.el8.i686
        i RHSA-2020:1828 Low/Sec. glibc-2.28-101.el8.x86_64
        i RHSA-2020:4444 Moderate/Sec. glibc-2.28-127.el8.i686
        i RHSA-2020:4444 Moderate/Sec. glibc-2.28-127.el8.x86_64
        i RHSA-2021:1585 Moderate/Sec. glibc-2.28-151.el8.i686
        i RHSA-2021:1585 Moderate/Sec. glibc-2.28-151.el8.x86_64
        i RHSA-2021:4358 Moderate/Sec. glibc-2.28-164.el8.i686
        i RHSA-2021:4358 Moderate/Sec. glibc-2.28-164.el8.x86_64
        i RHSA-2022:0896 Moderate/Sec. glibc-2.28-164.el8_5.3.i686
        i RHSA-2022:0896 Moderate/Sec. glibc-2.28-164.el8_5.3.x86_64
        i RHSA-2019:3513 Moderate/Sec. glibc-2.28-72.el8.i686
        i RHSA-2019:3513 Moderate/Sec. glibc-2.28-72.el8.x86_64
        i RHSA-2020:1828 Low/Sec. libnsl-2.28-101.el8.i686
        i RHSA-2020:1828 Low/Sec. libnsl-2.28-101.el8.x86_64
        i RHSA-2020:4444 Moderate/Sec. libnsl-2.28-127.el8.i686
        i RHSA-2020:4444 Moderate/Sec. libnsl-2.28-127.el8.x86_64
        i RHSA-2021:1585 Moderate/Sec. libnsl-2.28-151.el8.i686
        i RHSA-2021:1585 Moderate/Sec. libnsl-2.28-151.el8.x86_64
        i RHSA-2021:4358 Moderate/Sec. libnsl-2.28-164.el8.i686
        i RHSA-2021:4358 Moderate/Sec. libnsl-2.28-164.el8.x86_64
        i RHSA-2022:0896 Moderate/Sec. libnsl-2.28-164.el8_5.3.i686
        i RHSA-2022:0896 Moderate/Sec. libnsl-2.28-164.el8_5.3.x86_64
        i RHSA-2019:3513 Moderate/Sec. libnsl-2.28-72.el8.i686
        i RHSA-2019:3513 Moderate/Sec. libnsl-2.28-72.el8.x86_64
      1. yumr update --security
        Error:
        Problem: package libnsl-2.28-164.el8_5.3.i686 requires glibc(x86-32) = 2.28-164.el8_5.3, but none of the providers can be installed
      • cannot install both glibc-2.28-225.el8.i686 and glibc-2.28-164.el8_5.3.i686
      • cannot install the best update candidate for package libnsl-2.28-164.el8_5.3.i686
      • cannot install the best update candidate for package glibc-2.28-164.el8_5.3.i686
        (try to add '-allowerasing' to command line to replace conflicting packages or 'skip-broken' to skip uninstallable packages or '-nobest' to use not only best candidate packages)

      ~~~

      Now the tricky part is, if you update glibc and libnsl, it works fine so we know the updates are present.

      If you INSTALL ANY PACKAGE, it suddenly starts working.

      ~~~

      1. yumr install sos -y
        Installed:
        python3-magic-5.33-20.el8.noarch python3-pexpect-4.3.1-3.el8.noarch
        python3-ptyprocess-0.5.2-4.el8.noarch sos-4.5.3-1.el8.noarch
      2. rm -rf /test/etc/yum.repos.d/ ###Removing the blank redhat.repo that was generated to force the /test db to use the systems redhat.repo
      3. yumr update --security glibc libnsl
        No security updates needed for "glibc", but 1 update available
        Dependencies resolved.
        ==============================================================================================
        Package Arch Version Repository Size
        ==============================================================================================
        Upgrading:
        glibc i686 2.28-225.el8 rhel-8-for-x86_64-baseos-rpms 2.0 M
        glibc x86_64 2.28-225.el8 rhel-8-for-x86_64-baseos-rpms 2.2 M
        glibc-common x86_64 2.28-225.el8 rhel-8-for-x86_64-baseos-rpms 1.0 M
        glibc-devel x86_64 2.28-225.el8 rhel-8-for-x86_64-baseos-rpms 83 k
        glibc-headers x86_64 2.28-225.el8 rhel-8-for-x86_64-baseos-rpms 488 k
        glibc-langpack-en x86_64 2.28-225.el8 rhel-8-for-x86_64-baseos-rpms 827 k
        libnsl i686 2.28-225.el8 rhel-8-for-x86_64-baseos-rpms 109 k
        libnsl x86_64 2.28-225.el8 rhel-8-for-x86_64-baseos-rpms 105 k
        Installing weak dependencies:
        glibc-gconv-extra i686 2.28-225.el8 rhel-8-for-x86_64-baseos-rpms 1.6 M
        glibc-gconv-extra x86_64 2.28-225.el8 rhel-8-for-x86_64-baseos-rpms 1.5 M

      Transaction Summary
      ==============================================================================================
      Install 2 Packages
      Upgrade 8 Packages

            amatej@redhat.com Ales Matej
            rhn-support-jcastran John Castranio
            packaging-team-maint packaging-team-maint
            Eva Mrakova Eva Mrakova
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: