Bug 1773923

Summary: Command "dnf updateinfo list sec" list security errata for kernel even if latest kernel is installed
Product: Red Hat Satellite Reporter: Surjeet Salvi <susalvi>
Component: Errata ManagementAssignee: satellite6-bugs <satellite6-bugs>
Status: CLOSED DUPLICATE QA Contact: Akhil Jha <akjha>
Severity: high Docs Contact:
Priority: high    
Version: 6.6.0CC: dominique.gagnon, iballou, jcastran, susalvi
Target Milestone: UnspecifiedKeywords: Triaged
Target Release: Unused   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-11-29 21:08:12 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Surjeet Salvi 2019-11-19 10:45:36 UTC 
Description of problem:
Command "dnf updateinfo list sec" list security errata for kernel even if the latest kernel is installed.

Version-Release number of selected component (if applicable):
Red Hat Enterprise Linux release 8.1 (Ootpa)
Satellite Server 6.4, 6.5, 6.6

How reproducible:


Steps to Reproduce:
1. Register an RHEL 8 host with Satellite Server
2. Perform full system update using "yum update -y" and reboot the system
3. Execute the command "dnf updateinfo list sec" which will show applicable security for kernel only

Actual results:

- Command "dnf updateinfo list sec" show errata for all versions available including old kernel.

[root@vm254-94 ~]# uname -a
Linux vm254-94.gsslab.pnq2.redhat.com 4.18.0-147.0.3.el8_1.x86_64 #1 SMP Mon Nov 11 12:58:36 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux

[root@vm254-94 ~]# uname -r
4.18.0-147.0.3.el8_1.x86_64

[root@vm254-94 ~]# dnf updateinfo list sec
Updating Subscription Management repositories.
Last metadata expiration check: 0:08:00 ago on Tue 19 Nov 2019 03:45:06 PM IST.
RHSA-2019:3832 Important/Sec. kernel-core-4.18.0-147.0.2.el8_1.x86_64
RHSA-2019:3871 Important/Sec. kernel-core-4.18.0-147.0.3.el8_1.x86_64
RHSA-2019:3517 Important/Sec. kernel-core-4.18.0-147.el8.x86_64
RHSA-2019:2827 Important/Sec. kernel-core-4.18.0-80.11.2.el8_0.x86_64
RHSA-2019:3832 Important/Sec. kernel-modules-4.18.0-147.0.2.el8_1.x86_64
RHSA-2019:3871 Important/Sec. kernel-modules-4.18.0-147.0.3.el8_1.x86_64
RHSA-2019:3517 Important/Sec. kernel-modules-4.18.0-147.el8.x86_64
RHSA-2019:2827 Important/Sec. kernel-modules-4.18.0-80.11.2.el8_0.x86_64

[root@vm254-94 ~]# dnf updateinfo list available
Updating Subscription Management repositories.
Last metadata expiration check: 0:08:52 ago on Tue 19 Nov 2019 03:45:06 PM IST.
RHSA-2019:3832 Important/Sec. kernel-core-4.18.0-147.0.2.el8_1.x86_64
RHSA-2019:3871 Important/Sec. kernel-core-4.18.0-147.0.3.el8_1.x86_64
RHSA-2019:3517 Important/Sec. kernel-core-4.18.0-147.el8.x86_64
RHSA-2019:2827 Important/Sec. kernel-core-4.18.0-80.11.2.el8_0.x86_64
RHSA-2019:3832 Important/Sec. kernel-modules-4.18.0-147.0.2.el8_1.x86_64
RHSA-2019:3871 Important/Sec. kernel-modules-4.18.0-147.0.3.el8_1.x86_64
RHSA-2019:3517 Important/Sec. kernel-modules-4.18.0-147.el8.x86_64
RHSA-2019:2827 Important/Sec. kernel-modules-4.18.0-80.11.2.el8_0.x86_64

Expected results:
Command "dnf updateinfo list available" should able to show new errata if applicable to the system. 

Additional info:

- I tried the following workaround
a. Remove all the old installed kernel and its dependent package.
b. Clear the yum cache "dnf clean all"
c. Run the command "dnf updateinfo list available" shows the expected result as below

[root@vm254-94 ~]# dnf updateinfo list available
Updating Subscription Management repositories.
Red Hat Enterprise Linux 8 for x86_64 - AppStream (RPMs)                                                                                                                            19 MB/s |  13 MB     00:00    
Red Hat Enterprise Linux 8 for x86_64 - BaseOS (RPMs)                                                                                                                               22 MB/s |  12 MB     00:00    
Last metadata expiration check: 0:00:02 ago on Tue 19 Nov 2019 04:14:03 PM IST.
[root@vm254-94 ~]#
Comment 6 Surjeet Salvi 2019-12-20 21:25:07 UTC 
Hello Team,

Could you please provide an update on BZ

Regards
Surjeet
Comment 7 Surjeet Salvi 2019-12-23 13:01:00 UTC 
Hello Team,

Could you please provide an update on BZ

Regards
Surjeet
Comment 8 Surjeet Salvi 2020-01-21 13:03:28 UTC 
Hello Team,

Could you please provide an update on BZ

Regards
Surjeet
Comment 10 Dominique Gagnon 2020-04-12 00:58:40 UTC 
I've got the exact same problem on Oracle Linux 8.1 using public repos from Oracle so I don't think it's specific to Satellite 6.
Comment 11 Dominique Gagnon 2020-04-12 02:59:36 UTC 
I think this is a duplicate of the following: https://bugzilla.redhat.com/show_bug.cgi?id=1728004
Comment 13 Surjeet Salvi 2020-06-17 17:16:29 UTC 
Hello Team,

Could you please provide an update on BZ

Regards
Surjeet
Comment 14 Stephen Wadeley 2021-01-07 17:28:50 UTC 
Hello @Surgeet

dnf utility is not a Satellite product, its RHEL8.

Please check again using later package mentioned in "Fixed In Version" field of the RHEL8 bug [1]

If that works, close this bug as duplicate of that bug.

 If it does not work, try to reproduce the issue against CDN and raise a new bug against product and component shown in [1]




Thank you

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1728004
Comment 15 Surjeet Salvi 2021-02-04 15:31:27 UTC 
Hello Stephen,

Thank you for your response. 

I have followed the steps as per BUG - https://bugzilla.redhat.com/show_bug.cgi?id=1728004 and did see any issues with the kernel packages

But when suggested to the customer, he is still facing a similar issue for the other RHEL packages.

I am waiting for the details from the Customer. I Will update the bug once I receive the further information.

Thank you
Comment 18 Red Hat Bugzilla 2023-09-15 00:19:44 UTC 
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 500 days