Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-86205

dnf update --security doesn't correctly apply updates to all the available packages.

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • No
    • Low
    • rhel-swm
    • ssg_core_services
    • 0
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      What were you trying to do that didn't work?

      Updated to the latest version of libdnf, yum update --security has the following dependency error.

      ------

      > # yum update --security

      Error:
      Problem: package sssd-ipa-2.9.4-5.el8_10.1.x86_64 from rhel-8-for-x86_64-baseos-rpms requires samba-client-libs >= 4.19.4-6.el8_10, but none of the providers can be installed

      • package samba-client-libs-4.19.4-6.el8_10.x86_64 from rhel-8-for-x86_64-baseos-rpms requires samba-common-libs = 4.19.4-6.el8_10, but none of the providers can be installed
      • package samba-client-libs-4.19.4-6.el8_10.i686 from rhel-8-for-x86_64-baseos-rpms requires samba-common-libs = 4.19.4-6.el8_10, but none of the providers can be installed
      • problem with installed package sssd-ipa-2.9.4-3.el8_10.x86_64
      • samba-common-libs-4.19.4-6.el8_10.i686 from rhel-8-for-x86_64-baseos-rpms does not belong to a distupgrade repository
      • package sssd-ipa-2.9.4-3.el8_10.x86_64 from @System requires sssd-common = 2.9.4-3.el8_10, but none of the providers can be installed
      • package sssd-ipa-2.9.4-3.el8_10.x86_64 from rhel-8-for-x86_64-baseos-rpms requires sssd-common = 2.9.4-3.el8_10, but none of the providers can be installed
      • package sssd-ipa-2.9.4-4.el8_10.x86_64 from rhel-8-for-x86_64-baseos-rpms requires sssd-common = 2.9.4-4.el8_10, but none of the providers can be installed
      • cannot install both samba-common-libs-4.19.4-6.el8_10.x86_64 from rhel-8-for-x86_64-baseos-rpms and samba-common-libs-4.19.4-5.el8_10.x86_64 from @System
      • package libsss_autofs-2.9.4-5.el8_10.1.x86_64 from rhel-8-for-x86_64-baseos-rpms conflicts with sssd-common < 2.9.4-5.el8_10.1 provided by sssd-common-2.9.4-3.el8_10.x86_64 from @System
      • package libsss_autofs-2.9.4-5.el8_10.1.x86_64 from rhel-8-for-x86_64-baseos-rpms conflicts with sssd-common < 2.9.4-5.el8_10.1 provided by sssd-common-2.9.4-3.el8_10.x86_64 from rhel-8-for-x86_64-baseos-rpms
      • package libsss_autofs-2.9.4-5.el8_10.1.x86_64 from rhel-8-for-x86_64-baseos-rpms conflicts with sssd-common < 2.9.4-5.el8_10.1 provided by sssd-common-2.9.4-4.el8_10.x86_64 from rhel-8-for-x86_64-baseos-rpms
      • cannot install the best update candidate for package samba-common-libs-4.19.4-5.el8_10.x86_64
      • cannot install the best update candidate for package libsss_autofs-2.7.3-4.el8_7.1.x86_64
        (try to add '{}allowerasing' to command line to replace conflicting packages or '{}skip-broken' to skip uninstallable packages or '{-}-nobest' to use not only best candidate packages)
        ------

      > # rpm -qa |grep samba
      samba-common-4.19.4-5.el8_10.noarch
      samba-dc-libs-4.19.4-5.el8_10.x86_64
      samba-common-libs-4.19.4-5.el8_10.x86_64
      samba-libs-4.19.4-5.el8_10.x86_64
      samba-client-libs-4.19.4-5.el8_10.x86_64

      > # rpm -qa |grep i686
      glibc-2.28-251.el8_10.14.i686
      glibc-gconv-extra-2.28-251.el8_10.14.i686

      > # rpm -qa |grep libdnf
      libdnf-0.63.0-21.el8_10.x86_64
      python3-libdnf-0.63.0-21.el8_10.x86_64

      > # yum updateinfo list --security --all |grep samba
      i RHSA-2019:3582 Moderate/Sec. samba-client-libs-4.10.4-1.el8.x86_64
      i RHSA-2020:1878 Moderate/Sec. samba-client-libs-4.11.2-13.el8.x86_64
      i RHSA-2021:1647 Moderate/Sec. samba-client-libs-4.13.3-3.el8.x86_64
      i RHSA-2021:4058 Moderate/Sec. samba-client-libs-4.13.3-5.el8_4.x86_64
      i RHSA-2021:5082 Important/Sec. samba-client-libs-4.14.5-7.el8_5.x86_64
      i RHSA-2022:0332 Critical/Sec. samba-client-libs-4.14.5-9.el8_5.x86_64
      i RHSA-2022:7111 Moderate/Sec. samba-client-libs-4.15.5-10.el8_6.x86_64
      i RHSA-2022:2074 Moderate/Sec. samba-client-libs-4.15.5-5.el8.x86_64
      i RHSA-2023:0838 Important/Sec. samba-client-libs-4.16.4-4.el8_7.x86_64
      i RHSA-2023:2987 Low/Sec. samba-client-libs-4.17.5-2.el8.x86_64
      i RHSA-2023:4328 Moderate/Sec. samba-client-libs-4.17.5-3.el8_8.x86_64
      i RHSA-2023:7139 Moderate/Sec. samba-client-libs-4.18.6-1.el8.x86_64
      i RHSA-2023:7467 Moderate/Sec. samba-client-libs-4.18.6-2.el8_9.x86_64
      i RHSA-2019:3582 Moderate/Sec. samba-common-4.10.4-1.el8.noarch
      i RHSA-2020:1878 Moderate/Sec. samba-common-4.11.2-13.el8.noarch
      i RHSA-2021:1647 Moderate/Sec. samba-common-4.13.3-3.el8.noarch
      i RHSA-2021:4058 Moderate/Sec. samba-common-4.13.3-5.el8_4.noarch
      i RHSA-2021:5082 Important/Sec. samba-common-4.14.5-7.el8_5.noarch
      i RHSA-2022:0332 Critical/Sec. samba-common-4.14.5-9.el8_5.noarch
      i RHSA-2022:7111 Moderate/Sec. samba-common-4.15.5-10.el8_6.noarch
      i RHSA-2022:2074 Moderate/Sec. samba-common-4.15.5-5.el8.noarch
      i RHSA-2023:0838 Important/Sec. samba-common-4.16.4-4.el8_7.noarch
      i RHSA-2023:2987 Low/Sec. samba-common-4.17.5-2.el8.noarch
      i RHSA-2023:4328 Moderate/Sec. samba-common-4.17.5-3.el8_8.noarch
      i RHSA-2023:7139 Moderate/Sec. samba-common-4.18.6-1.el8.noarch
      i RHSA-2023:7467 Moderate/Sec. samba-common-4.18.6-2.el8_9.noarch
      i RHSA-2019:3582 Moderate/Sec. samba-common-libs-4.10.4-1.el8.x86_64
      i RHSA-2020:1878 Moderate/Sec. samba-common-libs-4.11.2-13.el8.x86_64
      i RHSA-2021:1647 Moderate/Sec. samba-common-libs-4.13.3-3.el8.x86_64
      i RHSA-2021:4058 Moderate/Sec. samba-common-libs-4.13.3-5.el8_4.x86_64
      i RHSA-2021:5082 Important/Sec. samba-common-libs-4.14.5-7.el8_5.x86_64
      i RHSA-2022:0332 Critical/Sec. samba-common-libs-4.14.5-9.el8_5.x86_64
      i RHSA-2022:7111 Moderate/Sec. samba-common-libs-4.15.5-10.el8_6.x86_64
      i RHSA-2022:2074 Moderate/Sec. samba-common-libs-4.15.5-5.el8.x86_64
      i RHSA-2023:0838 Important/Sec. samba-common-libs-4.16.4-4.el8_7.x86_64
      i RHSA-2023:2987 Low/Sec. samba-common-libs-4.17.5-2.el8.x86_64
      i RHSA-2023:4328 Moderate/Sec. samba-common-libs-4.17.5-3.el8_8.x86_64
      i RHSA-2023:7139 Moderate/Sec. samba-common-libs-4.18.6-1.el8.x86_64
      i RHSA-2023:7467 Moderate/Sec. samba-common-libs-4.18.6-2.el8_9.x86_64
      i RHSA-2023:2987 Low/Sec. samba-dc-libs-4.17.5-2.el8.x86_64
      i RHSA-2023:4328 Moderate/Sec. samba-dc-libs-4.17.5-3.el8_8.x86_64
      i RHSA-2023:7139 Moderate/Sec. samba-dc-libs-4.18.6-1.el8.x86_64
      i RHSA-2023:7467 Moderate/Sec. samba-dc-libs-4.18.6-2.el8_9.x86_64
      i RHSA-2019:3582 Moderate/Sec. samba-libs-4.10.4-1.el8.x86_64
      i RHSA-2020:1878 Moderate/Sec. samba-libs-4.11.2-13.el8.x86_64
      i RHSA-2021:1647 Moderate/Sec. samba-libs-4.13.3-3.el8.x86_64
      i RHSA-2021:4058 Moderate/Sec. samba-libs-4.13.3-5.el8_4.x86_64
      i RHSA-2021:5082 Important/Sec. samba-libs-4.14.5-7.el8_5.x86_64
      i RHSA-2022:0332 Critical/Sec. samba-libs-4.14.5-9.el8_5.x86_64
      i RHSA-2022:7111 Moderate/Sec. samba-libs-4.15.5-10.el8_6.x86_64
      i RHSA-2022:2074 Moderate/Sec. samba-libs-4.15.5-5.el8.x86_64
      i RHSA-2023:0838 Important/Sec. samba-libs-4.16.4-4.el8_7.x86_64
      i RHSA-2023:2987 Low/Sec. samba-libs-4.17.5-2.el8.x86_64
      i RHSA-2023:4328 Moderate/Sec. samba-libs-4.17.5-3.el8_8.x86_64
      i RHSA-2023:7139 Moderate/Sec. samba-libs-4.18.6-1.el8.x86_64
      i RHSA-2023:7467 Moderate/Sec. samba-libs-4.18.6-2.el8_9.x86_64
       

      What is the impact of this issue to you?

      Customer wants to run "yum update" command with "--security" option smoothly.

      Please provide the package NVR for which the bug is seen:

      libdnf-0.63.0-21.el8_10.x86_64

      samba-dc-libs-4.19.4-5.el8_10.x86_64

      How reproducible is this bug?:

      Steps to reproduce

      1. Install glibc i686 packages like  glibc-2.28-251.el8_10.14.i686 and glibc-gconv-extra-2.28-251.el8_10.14.i686
      2. yum downgrade samba-client-libs-4.19.4-5.el8_10 sssd-ipa-2.9.4-3.el8_10 libsss_autofs-2.7.3-4.el8_7.1
      3. yum install samba-dc-libs-4.19.4-5.el8_10
      4. yum update --security" command failed.

      Expected results

      No errors.

      Actual results

      ># yum update --security

      Error:
      Problem: package sssd-ipa-2.9.4-5.el8_10.1.x86_64 from rhel-8-for-x86_64-baseos-rpms requires samba-client-libs >= 4.19.4-6.el8_10, but none of the providers can be installed

      • package samba-client-libs-4.19.4-6.el8_10.x86_64 from rhel-8-for-x86_64-baseos-rpms requires samba-common-libs = 4.19.4-6.el8_10, but none of the providers can be installed
      • package samba-client-libs-4.19.4-6.el8_10.i686 from rhel-8-for-x86_64-baseos-rpms requires samba-common-libs = 4.19.4-6.el8_10, but none of the providers can be installed
      • problem with installed package sssd-ipa-2.9.4-3.el8_10.x86_64
      • samba-common-libs-4.19.4-6.el8_10.i686 from rhel-8-for-x86_64-baseos-rpms does not belong to a distupgrade repository
      • package sssd-ipa-2.9.4-3.el8_10.x86_64 from @System requires sssd-common = 2.9.4-3.el8_10, but none of the providers can be installed
      • package sssd-ipa-2.9.4-3.el8_10.x86_64 from rhel-8-for-x86_64-baseos-rpms requires sssd-common = 2.9.4-3.el8_10, but none of the providers can be installed
      • package sssd-ipa-2.9.4-4.el8_10.x86_64 from rhel-8-for-x86_64-baseos-rpms requires sssd-common = 2.9.4-4.el8_10, but none of the providers can be installed
      • cannot install both samba-common-libs-4.19.4-6.el8_10.x86_64 from rhel-8-for-x86_64-baseos-rpms and samba-common-libs-4.19.4-5.el8_10.x86_64 from @System
      • package libsss_autofs-2.9.4-5.el8_10.1.x86_64 from rhel-8-for-x86_64-baseos-rpms conflicts with sssd-common < 2.9.4-5.el8_10.1 provided by sssd-common-2.9.4-3.el8_10.x86_64 from @System
      • package libsss_autofs-2.9.4-5.el8_10.1.x86_64 from rhel-8-for-x86_64-baseos-rpms conflicts with sssd-common < 2.9.4-5.el8_10.1 provided by sssd-common-2.9.4-3.el8_10.x86_64 from rhel-8-for-x86_64-baseos-rpms
      • package libsss_autofs-2.9.4-5.el8_10.1.x86_64 from rhel-8-for-x86_64-baseos-rpms conflicts with sssd-common < 2.9.4-5.el8_10.1 provided by sssd-common-2.9.4-4.el8_10.x86_64 from rhel-8-for-x86_64-baseos-rpms
      • cannot install the best update candidate for package samba-common-libs-4.19.4-5.el8_10.x86_64
      • cannot install the best update candidate for package libsss_autofs-2.7.3-4.el8_7.1.x86_64
        (try to add '{}allowerasing' to command line to replace conflicting packages or '{}skip-broken' to skip uninstallable packages or '{-}-nobest' to use not only best candidate packages)

      > # yum update --security --nobest

      ========================================================================================================================================================
      Package Architecture Version Repository Size
      ========================================================================================================================================================
      Upgrading:
      libipa_hbac x86_64 2.9.4-5.el8_10.1 rhel-8-for-x86_64-baseos-rpms 129 k
      libsmbclient x86_64 4.19.4-6.el8_10 rhel-8-for-x86_64-baseos-rpms 157 k
      libsss_autofs x86_64 2.9.4-5.el8_10.1 rhel-8-for-x86_64-baseos-rpms 131 k
      libsss_certmap x86_64 2.9.4-5.el8_10.1 rhel-8-for-x86_64-baseos-rpms 187 k
      libsss_idmap x86_64 2.9.4-5.el8_10.1 rhel-8-for-x86_64-baseos-rpms 133 k
      libsss_nss_idmap x86_64 2.9.4-5.el8_10.1 rhel-8-for-x86_64-baseos-rpms 142 k
      libwbclient x86_64 4.19.4-6.el8_10 rhel-8-for-x86_64-baseos-rpms 129 k
      python3-sssdconfig noarch 2.9.4-5.el8_10.1 rhel-8-for-x86_64-baseos-rpms 155 k
      samba-client-libs x86_64 4.19.4-6.el8_10 rhel-8-for-x86_64-baseos-rpms 5.0 M
      samba-common noarch 4.19.4-6.el8_10 rhel-8-for-x86_64-baseos-rpms 234 k
      samba-common-libs x86_64 4.19.4-6.el8_10 rhel-8-for-x86_64-baseos-rpms 183 k
      replacing samba-dc-libs.x86_64 4.19.4-5.el8_10
      samba-libs x86_64 4.19.4-6.el8_10 rhel-8-for-x86_64-baseos-rpms 204 k
      sssd x86_64 2.9.4-5.el8_10.1 rhel-8-for-x86_64-baseos-rpms 120 k
      sssd-ad x86_64 2.9.4-5.el8_10.1 rhel-8-for-x86_64-baseos-rpms 315 k
      sssd-client x86_64 2.9.4-5.el8_10.1 rhel-8-for-x86_64-baseos-rpms 246 k
      sssd-common x86_64 2.9.4-5.el8_10.1 rhel-8-for-x86_64-baseos-rpms 1.7 M
      sssd-common-pac x86_64 2.9.4-5.el8_10.1 rhel-8-for-x86_64-baseos-rpms 196 k
      sssd-ipa x86_64 2.9.4-5.el8_10.1 rhel-8-for-x86_64-baseos-rpms 380 k
      sssd-kcm x86_64 2.9.4-5.el8_10.1 rhel-8-for-x86_64-baseos-rpms 267 k
      sssd-krb5 x86_64 2.9.4-5.el8_10.1 rhel-8-for-x86_64-baseos-rpms 166 k
      sssd-krb5-common x86_64 2.9.4-5.el8_10.1 rhel-8-for-x86_64-baseos-rpms 207 k
      sssd-ldap x86_64 2.9.4-5.el8_10.1 rhel-8-for-x86_64-baseos-rpms 252 k
      sssd-proxy x86_64 2.9.4-5.el8_10.1 rhel-8-for-x86_64-baseos-rpms 165 k
      Skipping packages with conflicts:
      (add '--best --allowerasing' to command line to force their upgrade):
      sssd-common x86_64 2.9.4-4.el8_10 rhel-8-for-x86_64-baseos-rpms 1.7 M
      Skipping packages with broken dependencies:
      samba-client-libs i686 4.19.4-6.el8_10 rhel-8-for-x86_64-baseos-rpms 5.4 M
      sssd-ipa x86_64 2.9.4-4.el8_10 rhel-8-for-x86_64-baseos-rpms 379 k

      Transaction Summary
      ========================================================================================================================================================
      Upgrade 23 Packages
      Skip 3 Packages

      > # yum list obsoletes

      Obsoleting Packages
      samba-common-libs.i686 4.19.4-6.el8_10 rhel-8-for-x86_64-baseos-rpms
      samba-dc-libs.x86_64 4.19.4-5.el8_10 @rhel-8-for-x86_64-baseos-rpms
      samba-common-libs.x86_64 4.19.4-6.el8_10 rhel-8-for-x86_64-baseos-rpms
      samba-dc-libs.x86_64 4.19.4-5.el8_10 @rhel-8-for-x86_64-baseos-rpms

              packaging-team-maint packaging-team-maint
              rhn-support-xixing Xiaodong Xing
              packaging-team-maint packaging-team-maint
              Software Management QE Software Management QE
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated: