Bug 2088149
| Summary: | Performing security update from RHEL 8.5 to RHEL 8.6 causes dependency errors. | |||
|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 8 | Reporter: | Ameya Patil <amepatil> | |
| Component: | libdnf | Assignee: | amatej | |
| Status: | CLOSED ERRATA | QA Contact: | Eva Mrakova <emrakova> | |
| Severity: | urgent | Docs Contact: | Mariya Pershina <mpershin> | |
| Priority: | high | |||
| Version: | 8.5 | CC: | amatej, aperotti, bkaraore, blentz, daniel.robinson, james.antill, jcastran, kwalker, laurent.liegeois, lmanasko, mbanas, mblaha, mdchansl, miturria, mpershin, msunil, prjagtap, rcavalca, spanjikk, thomas.rumbaut | |
| Target Milestone: | rc | Keywords: | Triaged, ZStream | |
| Target Release: | --- | |||
| Hardware: | All | |||
| OS: | Linux | |||
| Whiteboard: | ||||
| Fixed In Version: | libdnf-0.63.0-10.el8 | Doc Type: | Known Issue | |
| Doc Text: |
.A security YUM upgrade fails for packages that change their architecture through the upgrade
The patch for link:https://bugzilla.redhat.com/show_bug.cgi?id=2088149[BZ#2088149], released with the link:https://access.redhat.com/errata/RHBA-2022:7711[RHBA-2022:7711] advisory, introduced the following regression: The YUM upgrade using security filters fails for packages that change their architecture from or to `noarch` through the upgrade. Consequently, it can leave the system in a vulnerable state.
To work around this problem, perform the regular upgrade without security filters.
|
Story Points: | --- | |
| Clone Of: | ||||
| : | 2095764 (view as bug list) | Environment: | ||
| Last Closed: | 2022-11-08 10:47:13 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | ||||
| Bug Blocks: | 2095764 | |||
*** Bug 2090785 has been marked as a duplicate of this bug. *** The workaround doesn't work for me. I cannot upgrade 8.6 without adding the --nobest option or I get: Error: Problem 1: cannot install the best update candidate for package samba-client-4.15.5-5.el8.x86_64 - nothing provides samba-client-libs = 4.15.5-8.el8_6 needed by samba-client-4.15.5-8.el8_6.x86_64 Problem 2: cannot install the best update candidate for package samba-common-libs-4.15.5-5.el8.x86_64 - nothing provides samba-client-libs = 4.15.5-8.el8_6 needed by samba-common-libs-4.15.5-8.el8_6.x86_64 Problem 3: package samba-client-libs-4.15.5-5.el8.x86_64 requires samba-common = 4.15.5-5.el8, but none of the providers can be installed - cannot install both samba-common-4.15.5-8.el8_6.noarch and samba-common-4.15.5-5.el8.noarch - cannot install the best update candidate for package samba-common-4.15.5-5.el8.noarch - cannot install the best update candidate for package samba-client-libs-4.15.5-5.el8.x86_64 (try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages) very similar issue and i cannot upgrade 8.6 Updating Subscription Management repositories. Last metadata expiration check: 0:00:31 ago on Tue 28 Jun 2022 08:47:53 PM CEST. Error: Problem 1: cannot install the best update candidate for package samba-client-4.15.5-5.el8.x86_64 - nothing provides samba-client-libs = 4.15.5-8.el8_6 needed by samba-client-4.15.5-8.el8_6.x86_64 Problem 2: cannot install the best update candidate for package samba-common-libs-4.15.5-5.el8.x86_64 - nothing provides samba-client-libs = 4.15.5-8.el8_6 needed by samba-common-libs-4.15.5-8.el8_6.x86_64 Problem 3: package samba-client-libs-4.15.5-5.el8.x86_64 requires samba-common = 4.15.5-5.el8, but none of the providers can be installed - cannot install both samba-common-4.15.5-8.el8_6.noarch and samba-common-4.15.5-5.el8.noarch - cannot install the best update candidate for package samba-common-4.15.5-5.el8.noarch - cannot install the best update candidate for package samba-client-libs-4.15.5-5.el8.x86_64 (try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages) Looks like #17 and #18 are indicating a separate bug. From what I can see, https://access.redhat.com/errata/RHBA-2022:5315 (RHEL 8) released only 2 updated packages: - samba-common-4.15.5-8.el8_6.noarch.rpm - samba-common-libs-4.15.5-8.el8_6.x86_64.rpm But at least the following packages are missing: - samba-client-libs-4.15.5-8.el8_6.noarch.rpm - samba-common-tools-4.15.5-8.el8_6.noarch.rpm - python3-samba-4.15.5-8.el8_6.x86_64.rpm Similar updates for RHEL 9 (https://access.redhat.com/errata/RHBA-2022:5247) and RHEL 7 (https://access.redhat.com/errata/RHBA-2022:5229) do contain more updated packages. Reference to related Bug 2101982 (yum update is failing due to missing samba-client-libs-4.15.5-8.el8_6.x86_64 package). Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (libdnf bug fix and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2022:7711 |
Description of problem: When updating the system from RHEL 8.5 to RHEL 8.6 with "dnf update --security" it causes dependency error for some of the packages in the update process. ~~~ # dnf update --security Updating Subscription Management repositories. Red Hat Enterprise Linux 8 for x86_64 - AppStream (RPMs) 2.8 MB/s | 44 MB 00:15 Red Hat Enterprise Linux 8 for x86_64 - BaseOS (RPMs) 2.8 MB/s | 47 MB 00:16 Last metadata expiration check: 0:00:10 ago on Thu 19 May 2022 01:15:26 AM IST. Error: Problem 1: cannot install both json-c-0.13.1-3.el8.x86_64 and json-c-0.13.1-2.el8.x86_64 - package bind-libs-lite-32:9.11.36-3.el8.x86_64 requires libjson-c.so.4(JSONC_0.14)(64bit), but none of the providers can be installed - cannot install the best update candidate for package json-c-0.13.1-2.el8.x86_64 - cannot install the best update candidate for package bind-libs-lite-32:9.11.26-6.el8.x86_64 Problem 2: problem with installed package dhcp-client-12:4.3.6-45.el8.x86_64 - package dhcp-client-12:4.3.6-47.el8.x86_64 requires dhcp-libs(x86-64) = 12:4.3.6-47.el8, but none of the providers can be installed - package dhcp-client-12:4.3.6-45.el8.x86_64 requires libdns-export.so.1112()(64bit), but none of the providers can be installed - cannot install both dhcp-libs-12:4.3.6-47.el8.x86_64 and dhcp-libs-12:4.3.6-45.el8.x86_64 - cannot install both bind-export-libs-32:9.11.36-3.el8.x86_64 and bind-export-libs-32:9.11.26-6.el8.x86_64 - cannot install both bind-export-libs-32:9.11.36-3.el8.x86_64 and bind-export-libs-32:9.11.26-4.el8_4.x86_64 - cannot install both bind-export-libs-32:9.11.36-3.el8.x86_64 and bind-export-libs-32:9.11.26-3.el8.x86_64 - cannot install the best update candidate for package dhcp-libs-12:4.3.6-45.el8.x86_64 - cannot install the best update candidate for package bind-export-libs-32:9.11.26-6.el8.x86_64 Problem 3: problem with installed package sssd-ipa-2.5.2-2.el8_5.4.x86_64 - package sssd-ipa-2.5.2-2.el8_5.4.x86_64 requires libndr.so.1()(64bit), but none of the providers can be installed - package sssd-ipa-2.5.2-2.el8_5.4.x86_64 requires libndr.so.1(NDR_0.0.1)(64bit), but none of the providers can be installed - package sssd-ipa-2.6.2-3.el8.x86_64 requires libipa_hbac(x86-64) = 2.6.2-3.el8, but none of the providers can be installed - package sssd-ipa-2.6.2-4.el8_6.x86_64 requires libipa_hbac(x86-64) = 2.6.2-4.el8_6, but none of the providers can be installed - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.14.5-10.el8_5.x86_64 - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.12.3-12.el8.3.x86_64 - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.13.3-3.el8.x86_64 - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.12.3-14.el8_3.x86_64 - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.13.3-4.el8_4.x86_64 - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.13.3-5.el8_4.x86_64 - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.14.5-2.el8.x86_64 - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.14.5-7.el8_5.x86_64 - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.14.5-9.el8_5.x86_64 - cannot install both libipa_hbac-2.6.2-3.el8.x86_64 and libipa_hbac-2.5.2-2.el8_5.4.x86_64 - cannot install both libipa_hbac-2.6.2-4.el8_6.x86_64 and libipa_hbac-2.5.2-2.el8_5.4.x86_64 - cannot install the best update candidate for package samba-client-libs-4.14.5-10.el8_5.x86_64 - cannot install the best update candidate for package libipa_hbac-2.5.2-2.el8_5.4.x86_64 Problem 4: problem with installed package sssd-common-pac-2.5.2-2.el8_5.4.x86_64 - package sssd-common-pac-2.6.2-3.el8.x86_64 requires libsss_idmap = 2.6.2-3.el8, but none of the providers can be installed - package sssd-common-pac-2.6.2-4.el8_6.x86_64 requires libsss_idmap = 2.6.2-4.el8_6, but none of the providers can be installed - package sssd-common-pac-2.5.2-2.el8_5.4.x86_64 requires libndr.so.1()(64bit), but none of the providers can be installed - package sssd-common-pac-2.5.2-2.el8_5.4.x86_64 requires libndr.so.1(NDR_0.0.1)(64bit), but none of the providers can be installed - libsss_idmap-2.6.2-3.el8.i686 has inferior architecture - libsss_idmap-2.6.2-4.el8_6.i686 has inferior architecture - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.14.5-10.el8_5.x86_64 - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.12.3-12.el8.3.x86_64 - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.13.3-3.el8.x86_64 - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.12.3-14.el8_3.x86_64 - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.13.3-4.el8_4.x86_64 - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.13.3-5.el8_4.x86_64 - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.14.5-2.el8.x86_64 - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.14.5-7.el8_5.x86_64 - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.14.5-9.el8_5.x86_64 - cannot install both libsss_idmap-2.6.2-3.el8.x86_64 and libsss_idmap-2.5.2-2.el8_5.4.x86_64 - cannot install both libsss_idmap-2.6.2-4.el8_6.x86_64 and libsss_idmap-2.5.2-2.el8_5.4.x86_64 - package libsmbclient-4.15.5-5.el8.x86_64 requires libndr.so.2()(64bit), but none of the providers can be installed - package libsmbclient-4.15.5-5.el8.x86_64 requires libndr.so.2(NDR_0.0.1)(64bit), but none of the providers can be installed - package libsmbclient-4.15.5-5.el8.x86_64 requires libsamba-debug-samba4.so(SAMBA_4.15.5)(64bit), but none of the providers can be installed - package libsmbclient-4.15.5-5.el8.x86_64 requires libreplace-samba4.so(SAMBA_4.15.5)(64bit), but none of the providers can be installed - package libsmbclient-4.15.5-5.el8.x86_64 requires libsamba-security-samba4.so(SAMBA_4.15.5)(64bit), but none of the providers can be installed - package libsmbclient-4.15.5-5.el8.x86_64 requires libsamba3-util-samba4.so(SAMBA_4.15.5)(64bit), but none of the providers can be installed - package libsmbclient-4.15.5-5.el8.x86_64 requires libsecrets3-samba4.so(SAMBA_4.15.5)(64bit), but none of the providers can be installed - package libsmbclient-4.15.5-5.el8.x86_64 requires libcli-smb-common-samba4.so(SAMBA_4.15.5)(64bit), but none of the providers can be installed - package libsmbclient-4.15.5-5.el8.x86_64 requires libgse-samba4.so(SAMBA_4.15.5)(64bit), but none of the providers can be installed - package libsmbclient-4.15.5-5.el8.x86_64 requires liblibsmb-samba4.so(SAMBA_4.15.5)(64bit), but none of the providers can be installed - package libsmbclient-4.15.5-5.el8.x86_64 requires libdcerpc-samba-samba4.so(SAMBA_4.15.5)(64bit), but none of the providers can be installed - package libsmbclient-4.15.5-5.el8.x86_64 requires liblibcli-lsa3-samba4.so(SAMBA_4.15.5)(64bit), but none of the providers can be installed - package libsmbclient-4.15.5-5.el8.x86_64 requires libmsrpc3-samba4.so(SAMBA_4.15.5)(64bit), but none of the providers can be installed - cannot install the best update candidate for package libsss_idmap-2.5.2-2.el8_5.4.x86_64 - cannot install the best update candidate for package libsmbclient-4.14.5-10.el8_5.x86_64 Problem 5: problem with installed package sssd-ad-2.5.2-2.el8_5.4.x86_64 - package sssd-ad-2.5.2-2.el8_5.4.x86_64 requires libndr.so.1()(64bit), but none of the providers can be installed - package sssd-ad-2.5.2-2.el8_5.4.x86_64 requires libndr.so.1(NDR_0.0.1)(64bit), but none of the providers can be installed - package sssd-ad-2.5.2-2.el8_5.4.x86_64 requires libndr.so.1(NDR_0.0.6)(64bit), but none of the providers can be installed - package sssd-ad-2.5.2-2.el8_5.4.x86_64 requires libndr.so.1(NDR_1.0.0)(64bit), but none of the providers can be installed - package sssd-ad-2.6.2-3.el8.x86_64 requires libsss_certmap = 2.6.2-3.el8, but none of the providers can be installed - package sssd-ad-2.6.2-4.el8_6.x86_64 requires libsss_certmap = 2.6.2-4.el8_6, but none of the providers can be installed - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.14.5-10.el8_5.x86_64 - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.12.3-12.el8.3.x86_64 - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.13.3-3.el8.x86_64 - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.12.3-14.el8_3.x86_64 - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.13.3-4.el8_4.x86_64 - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.13.3-5.el8_4.x86_64 - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.14.5-2.el8.x86_64 - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.14.5-7.el8_5.x86_64 - cannot install both samba-client-libs-4.15.5-5.el8.x86_64 and samba-client-libs-4.14.5-9.el8_5.x86_64 - libsss_certmap-2.6.2-3.el8.i686 has inferior architecture - libsss_certmap-2.6.2-4.el8_6.i686 has inferior architecture - package libwbclient-4.15.5-5.el8.x86_64 requires libreplace-samba4.so(SAMBA_4.15.5)(64bit), but none of the providers can be installed - cannot install both libsss_certmap-2.6.2-3.el8.x86_64 and libsss_certmap-2.5.2-2.el8_5.4.x86_64 - cannot install both libsss_certmap-2.6.2-4.el8_6.x86_64 and libsss_certmap-2.5.2-2.el8_5.4.x86_64 - cannot install the best update candidate for package libwbclient-4.14.5-10.el8_5.x86_64 - cannot install the best update candidate for package libsss_certmap-2.5.2-2.el8_5.4.x86_64 Problem 6: problem with installed package sssd-2.5.2-2.el8_5.4.x86_64 - package sssd-2.5.2-2.el8_5.4.x86_64 requires sssd-ipa = 2.5.2-2.el8_5.4, but none of the providers can be installed - package sssd-2.6.2-3.el8.x86_64 requires sssd-common = 2.6.2-3.el8, but none of the providers can be installed - package sssd-2.6.2-4.el8_6.x86_64 requires sssd-common = 2.6.2-4.el8_6, but none of the providers can be installed - package sssd-ipa-2.5.2-2.el8_5.4.x86_64 requires libndr.so.1()(64bit), but none of the providers can be installed - package sssd-ipa-2.5.2-2.el8_5.4.x86_64 requires libndr.so.1(NDR_0.0.1)(64bit), but none of the providers can be installed - package sssd-common-2.6.2-3.el8.x86_64 requires sssd-client(x86-64) = 2.6.2-3.el8, but none of the providers can be installed - package sssd-common-2.6.2-4.el8_6.x86_64 requires sssd-client(x86-64) = 2.6.2-4.el8_6, but none of the providers can be installed - package samba-client-libs-4.14.5-10.el8_5.x86_64 requires samba-common = 4.14.5-10.el8_5, but none of the providers can be installed - package samba-client-libs-4.12.3-12.el8.3.x86_64 requires samba-common = 4.12.3-12.el8.3, but none of the providers can be installed - package samba-client-libs-4.12.3-14.el8_3.x86_64 requires samba-common = 4.12.3-14.el8_3, but none of the providers can be installed - package samba-client-libs-4.13.3-4.el8_4.x86_64 requires samba-common = 4.13.3-4.el8_4, but none of the providers can be installed - package samba-client-libs-4.13.3-3.el8.x86_64 requires samba-common = 4.13.3-3.el8, but none of the providers can be installed - package samba-client-libs-4.13.3-5.el8_4.x86_64 requires samba-common = 4.13.3-5.el8_4, but none of the providers can be installed - package samba-client-libs-4.14.5-2.el8.x86_64 requires samba-common = 4.14.5-2.el8, but none of the providers can be installed - package samba-client-libs-4.14.5-9.el8_5.x86_64 requires samba-common = 4.14.5-9.el8_5, but none of the providers can be installed - package samba-client-libs-4.14.5-7.el8_5.x86_64 requires samba-common = 4.14.5-7.el8_5, but none of the providers can be installed - cannot install both sssd-client-2.6.2-3.el8.x86_64 and sssd-client-2.5.2-2.el8_5.4.x86_64 - cannot install both sssd-client-2.6.2-4.el8_6.x86_64 and sssd-client-2.5.2-2.el8_5.4.x86_64 - cannot install both samba-common-4.15.5-5.el8.noarch and samba-common-4.14.5-10.el8_5.noarch - cannot install both samba-common-4.15.5-5.el8.noarch and samba-common-4.12.3-12.el8.3.noarch - cannot install both samba-common-4.15.5-5.el8.noarch and samba-common-4.12.3-14.el8_3.noarch - cannot install both samba-common-4.15.5-5.el8.noarch and samba-common-4.13.3-4.el8_4.noarch - cannot install both samba-common-4.15.5-5.el8.noarch and samba-common-4.13.3-3.el8.noarch - cannot install both samba-common-4.15.5-5.el8.noarch and samba-common-4.13.3-5.el8_4.noarch - cannot install both samba-common-4.15.5-5.el8.noarch and samba-common-4.14.5-2.el8.noarch - cannot install both samba-common-4.15.5-5.el8.noarch and samba-common-4.14.5-9.el8_5.noarch - cannot install both samba-common-4.15.5-5.el8.noarch and samba-common-4.14.5-7.el8_5.noarch - cannot install the best update candidate for package sssd-client-2.5.2-2.el8_5.4.x86_64 - cannot install the best update candidate for package samba-common-4.14.5-10.el8_5.noarch (try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages) ~~~ Version-Release number of selected component (if applicable): ~~~ # rpm -qa | grep dnf | sort dnf-4.7.0-4.el8.noarch dnf-data-4.7.0-4.el8.noarch dnf-plugins-core-4.0.21-4.el8_5.noarch dnf-plugin-subscription-manager-1.28.21-5.el8_5.x86_64 kpatch-dnf-0.2-5.el8.noarch libdnf-0.63.0-3.el8.x86_64 python3-dnf-4.7.0-4.el8.noarch python3-dnf-plugins-core-4.0.21-4.el8_5.noarch python3-libdnf-0.63.0-3.el8.x86_64 ~~~ How reproducible: Every time if you have the following packages. ~~~ # rpm -qa | grep -e json -e dhcp -e bind -e sssd -e samba | sort bind-export-libs-9.11.26-6.el8.x86_64 bind-libs-9.11.26-6.el8.x86_64 bind-libs-lite-9.11.26-6.el8.x86_64 bind-license-9.11.26-6.el8.noarch bind-utils-9.11.26-6.el8.x86_64 dhcp-client-4.3.6-45.el8.x86_64 dhcp-common-4.3.6-45.el8.noarch dhcp-libs-4.3.6-45.el8.x86_64 json-c-0.13.1-2.el8.x86_64 json-glib-1.4.4-1.el8.x86_64 keybinder3-0.3.2-4.el8.x86_64 libfastjson-0.99.9-1.el8.x86_64 lua-json-1.3.2-9.el8.noarch python3-bind-9.11.26-6.el8.noarch python3-sssdconfig-2.5.2-2.el8_5.4.noarch rpcbind-1.2.5-8.el8.x86_64 samba-client-libs-4.14.5-10.el8_5.x86_64 samba-common-4.14.5-10.el8_5.noarch samba-common-libs-4.14.5-10.el8_5.x86_64 sssd-2.5.2-2.el8_5.4.x86_64 sssd-ad-2.5.2-2.el8_5.4.x86_64 sssd-client-2.5.2-2.el8_5.4.x86_64 sssd-common-2.5.2-2.el8_5.4.x86_64 sssd-common-pac-2.5.2-2.el8_5.4.x86_64 sssd-ipa-2.5.2-2.el8_5.4.x86_64 sssd-kcm-2.5.2-2.el8_5.4.x86_64 sssd-krb5-2.5.2-2.el8_5.4.x86_64 sssd-krb5-common-2.5.2-2.el8_5.4.x86_64 sssd-ldap-2.5.2-2.el8_5.4.x86_64 sssd-nfs-idmap-2.5.2-2.el8_5.4.x86_64 sssd-proxy-2.5.2-2.el8_5.4.x86_64 ~~~ Steps to Reproduce: To reproduce with these set of packages and consistently produce result, I did the following. 1. Install RHEL 8.5 system with Server with GUI so it contain these packages which are causing this issue. 2. Update the system first to RHEL 8.5 level to the latest version. # dnf update --releasever=8.5 # reboot 3. Then I performed security update only which reproduce this issue. # dnf update --security Actual results: It causes dependency error when updating the system with "--security" option Expected results: Should not cause the dependency error while doing security update. Additional info: We found that to workaround to issue, you can either do full update using "dnf update" Or update the packages causing issue outside of the security update and then do security update. # dnf update json-c dhcp-client sssd\* samba\* # dnf update --security