Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-135718

Getting dependency conflict error when updating security patches.

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • rhel-9.6
    • dnf
    • None
    • None
    • Moderate
    • rhel-swm
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      What were you trying to do that didn't work?

      User is experiencing the follloiwng dependency error when running "dnf update --security" command to update security patch.

       

      # dnf update --security
      ...
      Error:
       Problem: package samba-client-libs-4.22.4-6.el9_7.x86_64 from rhel-9-for-x86_64-baseos-rpms requires libldb = 4.22.4-6.el9_7, but none of the providers can be installed
        - package sssd-ad-2.9.7-4.el9_7.1.x86_64 from rhel-9-for-x86_64-baseos-rpms requires libndr.so.6()(64bit), but none of the providers can be installed
        - package sssd-ad-2.9.7-4.el9_7.1.x86_64 from rhel-9-for-x86_64-baseos-rpms requires libndr.so.6(NDR_0.0.1)(64bit), but none of the providers can be installed
        - package sssd-ad-2.9.7-4.el9_7.1.x86_64 from rhel-9-for-x86_64-baseos-rpms requires libndr.so.6(NDR_1.0.0)(64bit), but none of the providers can be installed
        - package sssd-ad-2.9.7-4.el9_7.1.x86_64 from rhel-9-for-x86_64-baseos-rpms requires libndr.so.6(NDR_0.0.6)(64bit), but none of the providers can be installed
        - cannot install both libldb-4.22.4-6.el9_7.x86_64 from rhel-9-for-x86_64-baseos-rpms and libldb-2.9.1-2.el9.x86_64 from @System
        - package libldb-4.22.4-6.el9_7.x86_64 from rhel-9-for-x86_64-baseos-rpms obsoletes libldb < 2.10 provided by libldb-2.9.1-2.el9.x86_64 from @System
        - package libldb-4.22.4-6.el9_7.i686 from rhel-9-for-x86_64-baseos-rpms obsoletes libldb < 2.10 provided by libldb-2.9.1-2.el9.x86_64 from @System
        - cannot install the best update candidate for package sssd-ad-2.9.5-4.el9_5.4.x86_64
        - cannot install the best update candidate for package libldb-2.9.1-2.el9.x86_64 

       

       

      Hitting the same error when running the following dnf commands

      dnf update --security
      dnf update --security --advisory RHSA-2025:20954
      dnf update --security --assumeno sssd-ad libldb

       

       

      The following command worked if we only update the "sssd-ad" security patch. All "libldb" and "samba" rpms are solved correctly.

       dnf update --security --assumeno sssd-ad 

      The following command also worked if we run the update without the "–-security" argument.

      dnf update --advisory RHSA-2025:20954 
      dnf update sssd-ad libldb 

       

      It appears that when running with "-–security", DNF is a lot more cautious  and hesitate to go further. 

      What is the impact of this issue to you?

      It is not practical to handle this situation manually and could generate significant overhead, when patching hundreds of servers

      Please provide the package NVR for which the bug is seen:

      dnf-data-4.14.0-25.el9.noarch
      libdnf-0.69.0-13.el9.x86_64
      dnf-4.14.0-25.el9.noarch
      python3-dnf-plugins-core-4.3.0-20.el9.noarch
      dnf-plugins-core-4.3.0-20.el9.noarch
      libdnf-plugin-subscription-manager-1.29.45.1-1.el9_6.x86_64
      libsolv-0.7.24-3.el9.x86_64

      How reproducible is this bug?:

      Easy

      Steps to reproduce

      1.  Prepare a RHEL 9.6 server and register to the RHSM. Install or update the following exact rpm versions:
      samba-client-libs-4.20.2-2.el9_5.x86_64
      sssd-ad-2.9.5-4.el9_5.4.x86_64 
      libldb-2.9.1-2.el9.x86_64
      1.  Run "dnf update --security"

      Expected results

      Update successfully

      Actual results

      Fail with above error.

       

       

              packaging-team-maint packaging-team-maint
              rhn-support-hyu Hao Chang Yu
              packaging-team-maint packaging-team-maint
              Software Management QE Software Management QE
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: