View Issue Details

IDProjectCategoryView StatusLast Update
0002938Rocky-Linux-8dnfpublic2023-10-03 21:38
ReporterDylan Bartos Assigned ToLouis Abel  
PrioritynormalSeveritymajorReproducibilityalways
Status feedbackResolutionreopened 
Summary0002938: i686 Security Errata not included in updateinfo.xml
DescriptionSimilar to Issue 2608.

The security errata for x86_64 does not include any packages for i686. Example advisory: RLSA-2023:1405. Errata HTTP site: https://errata.build.resf.org/RLSA-2023:1405. This site shows multiple packages for i686. When opening the updateinfo.xml and reviewing content for RLSA-2023:1405, none of the i686 packages are present. The same errata at Redhat RHSA-2023:1405 does include the i686 packages in the updateinfo.xml. Searching for the string 'i686' in the updateinfo.xml file returns no results. I suspect all packages are missing the i686 errata.

This results in dependency resolution failures whenever you have both i686 and x86_64 versions of the package installed on a dnf upgrade --advisory RLSA-2023:1405 command:

Error:
 Problem 1: openssl-devel-1:1.1.1k-7.el8_6.i686 has inferior architecture
  - cannot install both openssl-devel-1:1.1.1k-9.el8_7.x86_64 and openssl-devel-1:1.1.1k-7.el8_6.x86_64
  - cannot install the best update candidate for package openssl-devel-1:1.1.1k-7.el8_6.i686
  - cannot install the best update candidate for package openssl-devel-1:1.1.1k-7.el8_6.x86_64
 Problem 2: openssl-libs-1:1.1.1k-7.el8_6.i686 has inferior architecture
  - cannot install both openssl-libs-1:1.1.1k-9.el8_7.x86_64 and openssl-libs-1:1.1.1k-7.el8_6.x86_64
  - cannot install the best update candidate for package openssl-libs-1:1.1.1k-7.el8_6.i686
  - cannot install the best update candidate for package openssl-libs-1:1.1.1k-7.el8_6.x86_64

-------
FROM ROCKY ERRATA
-------
<pkglist>
      <collection short="rocky-linux-8-x86-64-baseos-rpms">
        <name>rocky-linux-8-x86-64-baseos-rpms</name>
        <package name="openssl" arch="x86_64" epoch="1" version="1.1.1k" release="9.el8_7" src="openssl-1.1.1k-9.el8_7.src.rpm">
          <filename>openssl-1.1.1k-9.el8_7.x86_64.rpm</filename>
          <sum type="sha256">9a938d81016ef3c3e733e4769e188999fbbfcdec71318a4698e1040d28867770</sum>
        </package>
        <package name="openssl-devel" arch="x86_64" epoch="1" version="1.1.1k" release="9.el8_7" src="openssl-1.1.1k-9.el8_7.src.rpm">
          <filename>openssl-devel-1.1.1k-9.el8_7.x86_64.rpm</filename>
          <sum type="sha256">7b1d407a69745004f56fa33cd2d345f1a84f9e8710ded5e0265dacbd4cc4e150</sum>
        </package>
        <package name="openssl-libs" arch="x86_64" epoch="1" version="1.1.1k" release="9.el8_7" src="openssl-1.1.1k-9.el8_7.src.rpm">
          <filename>openssl-libs-1.1.1k-9.el8_7.x86_64.rpm</filename>
          <sum type="sha256">1773916c99960d474e56f6ee2e7f2b94a3fa536a5fe12e4445bea0e34ea6ba01</sum>
        </package>
        <package name="openssl-perl" arch="x86_64" epoch="1" version="1.1.1k" release="9.el8_7" src="openssl-1.1.1k-9.el8_7.src.rpm">
          <filename>openssl-perl-1.1.1k-9.el8_7.x86_64.rpm</filename>
          <sum type="sha256">aac00ecf8f661033d59a38fa9944b36780c0e5bc64fb7f00c1ae2a249b8840ab</sum>
        </package>
      </collection>
</pkglist>
-------
FROM REDHAT ERRATA
-------
<pkglist>
      <collection short="rhel-8-for-x86_64-baseos-rpms__8_0_default">
        <name>rhel-8-for-x86_64-baseos-rpms__8_0_default</name>
        <package src="openssl-1.1.1k-9.el8_7.src.rpm" name="openssl-libs" epoch="1" version="1.1.1k" release="9.el8_7" arch="x86_64">
          <filename>openssl-libs-1.1.1k-9.el8_7.x86_64.rpm</filename>
          <sum type="sha256">91fc219ef2fabee25069ebb5d119463d510f9794fd42e94fe5f2af43cfa9c95c</sum>
        </package>
        <package src="openssl-1.1.1k-9.el8_7.src.rpm" name="openssl-libs" epoch="1" version="1.1.1k" release="9.el8_7" arch="i686">
          <filename>openssl-libs-1.1.1k-9.el8_7.i686.rpm</filename>
          <sum type="sha256">28dc2c167f1d417ef843e57dffd5e2f6921a8599847f98805cecff45b12c2890</sum>
        </package>
        <package src="openssl-1.1.1k-9.el8_7.src.rpm" name="openssl-perl" epoch="1" version="1.1.1k" release="9.el8_7" arch="x86_64">
          <filename>openssl-perl-1.1.1k-9.el8_7.x86_64.rpm</filename>
          <sum type="sha256">0ff606b23a716cf95770adc5e25f73ed80a775f8d9a1e52cb94d952cae4f075e</sum>
        </package>
        <package src="openssl-1.1.1k-9.el8_7.src.rpm" name="openssl-devel" epoch="1" version="1.1.1k" release="9.el8_7" arch="i686">
          <filename>openssl-devel-1.1.1k-9.el8_7.i686.rpm</filename>
          <sum type="sha256">5aaeadf179b270b0eadc3dc9c1e107aa5a9b0f205ca81a0807b23e7c62c1c812</sum>
        </package>
        <package src="openssl-1.1.1k-9.el8_7.src.rpm" name="openssl" epoch="1" version="1.1.1k" release="9.el8_7" arch="x86_64">
          <filename>openssl-1.1.1k-9.el8_7.x86_64.rpm</filename>
          <sum type="sha256">ef476eb36d94df6a2625364169ae48c85cd040b473a4d6c8bc10455a45535b2c</sum>
        </package>
        <package src="openssl-1.1.1k-9.el8_7.src.rpm" name="openssl-devel" epoch="1" version="1.1.1k" release="9.el8_7" arch="x86_64">
          <filename>openssl-devel-1.1.1k-9.el8_7.x86_64.rpm</filename>
          <sum type="sha256">00ade765ab49f06ee61929bf94ab8636b7f5007e9438a1e920d68db964715a59</sum>
        </package>
      </collection>
</pkglist>
TagsNo tags attached.

Activities

Dylan Bartos

Dylan Bartos

2023-05-22 16:59

reporter   ~0003466

PR Filed for proposed solution
https://github.com/resf/distro-tools/pull/9
Louis Abel

Louis Abel

2023-06-02 20:07

administrator   ~0003635

This should be fixed in the current version of the errata toolkit as the PR is merged.
Dylan Bartos

Dylan Bartos

2023-10-03 21:38

reporter   ~0004786

The current published errata at http://dl.rockylinux.org/pub/rocky/8/BaseOS/x86_64/os/repodata/ does not include i686 packages, this issue needs to be re-reviewed.

Issue History

Date Modified Username Field Change
2023-04-19 20:55 Dylan Bartos New Issue
2023-05-22 16:59 Dylan Bartos Note Added: 0003466
2023-06-02 20:07 Louis Abel Assigned To => Louis Abel
2023-06-02 20:07 Louis Abel Status new => closed
2023-06-02 20:07 Louis Abel Resolution open => fixed
2023-06-02 20:07 Louis Abel Note Added: 0003635
2023-10-03 21:38 Dylan Bartos Status closed => feedback
2023-10-03 21:38 Dylan Bartos Resolution fixed => reopened
2023-10-03 21:38 Dylan Bartos Note Added: 0004786