-
Bug
-
Resolution: Unresolved
-
Undefined
-
None
-
rhel-9.6
-
None
-
None
-
Moderate
-
rhel-swm
-
None
-
False
-
False
-
-
None
-
None
-
None
-
None
-
Unspecified
-
Unspecified
-
Unspecified
-
None
What were you trying to do that didn't work?
User is experiencing the follloiwng dependency error when running "dnf update --security" command to update security patch.
# dnf update --security ... Error: Problem: package samba-client-libs-4.22.4-6.el9_7.x86_64 from rhel-9-for-x86_64-baseos-rpms requires libldb = 4.22.4-6.el9_7, but none of the providers can be installed - package sssd-ad-2.9.7-4.el9_7.1.x86_64 from rhel-9-for-x86_64-baseos-rpms requires libndr.so.6()(64bit), but none of the providers can be installed - package sssd-ad-2.9.7-4.el9_7.1.x86_64 from rhel-9-for-x86_64-baseos-rpms requires libndr.so.6(NDR_0.0.1)(64bit), but none of the providers can be installed - package sssd-ad-2.9.7-4.el9_7.1.x86_64 from rhel-9-for-x86_64-baseos-rpms requires libndr.so.6(NDR_1.0.0)(64bit), but none of the providers can be installed - package sssd-ad-2.9.7-4.el9_7.1.x86_64 from rhel-9-for-x86_64-baseos-rpms requires libndr.so.6(NDR_0.0.6)(64bit), but none of the providers can be installed - cannot install both libldb-4.22.4-6.el9_7.x86_64 from rhel-9-for-x86_64-baseos-rpms and libldb-2.9.1-2.el9.x86_64 from @System - package libldb-4.22.4-6.el9_7.x86_64 from rhel-9-for-x86_64-baseos-rpms obsoletes libldb < 2.10 provided by libldb-2.9.1-2.el9.x86_64 from @System - package libldb-4.22.4-6.el9_7.i686 from rhel-9-for-x86_64-baseos-rpms obsoletes libldb < 2.10 provided by libldb-2.9.1-2.el9.x86_64 from @System - cannot install the best update candidate for package sssd-ad-2.9.5-4.el9_5.4.x86_64 - cannot install the best update candidate for package libldb-2.9.1-2.el9.x86_64
Hitting the same error when running the following dnf commands
dnf update --security dnf update --security --advisory RHSA-2025:20954 dnf update --security --assumeno sssd-ad libldb
The following command worked if we only update the "sssd-ad" security patch. All "libldb" and "samba" rpms are solved correctly.
dnf update --security --assumeno sssd-ad
The following command also worked if we run the update without the "–-security" argument.
dnf update --advisory RHSA-2025:20954 dnf update sssd-ad libldb
It appears that when running with "-–security", DNF is a lot more cautious and hesitate to go further.
What is the impact of this issue to you?
It is not practical to handle this situation manually and could generate significant overhead, when patching hundreds of servers
Please provide the package NVR for which the bug is seen:
dnf-data-4.14.0-25.el9.noarch
libdnf-0.69.0-13.el9.x86_64
dnf-4.14.0-25.el9.noarch
python3-dnf-plugins-core-4.3.0-20.el9.noarch
dnf-plugins-core-4.3.0-20.el9.noarch
libdnf-plugin-subscription-manager-1.29.45.1-1.el9_6.x86_64
libsolv-0.7.24-3.el9.x86_64
How reproducible is this bug?:
Easy
Steps to reproduce
- Prepare a RHEL 9.6 server and register to the RHSM. Install or update the following exact rpm versions:
samba-client-libs-4.20.2-2.el9_5.x86_64 sssd-ad-2.9.5-4.el9_5.4.x86_64 libldb-2.9.1-2.el9.x86_64
- Run "dnf update --security"
Expected results
Update successfully
Actual results
Fail with above error.