[UBI] Latest UBI content has openssl-libs conflict?

[Phil Estes]

Josh Boyer wrote on 4/13/20 6:29 PM:
> On Mon, Apr 13, 2020 at 10:13 AM Josh Boyer <jwboyer at redhat.com> wrote:
>> On Mon, Apr 13, 2020 at 10:03 AM Phil Estes <estesp at gmail.com> wrote:
>>> I assumed others would be hitting this with the latest ubi8-minimal, but
>>> in case it hasn't been seen/reported, it appears there is some strange
>>> conflict with an openssl update from the latest CVEs released and UBI8
>>> minimal.
>>>
>>> One easy way to recreate is to update your image from one of the RH
>>> registries to the latest ubi8 minimal. In my case that gets me this image:
>>> registry.access.redhat.com/ubi8/ubi-minimal   latest 91d23a64fdf2
>>> 12 days ago         107MB
>>>
>>> Then either run it interactively and try `microdnf install go-toolset`
>>> or run a build that installs go-toolset and after building the
>>> transaction, you can see that it wants to downgrade openssl, and then
>>> fails with the error below:
>>
>> Yep, reported and we have people looking at it now.  Apologies for the issues here and we hope to get to root cause soon.
> The issue should be resolved now.  If you are still having trouble,
> please let us know.
>
> josh

Thanks Josh! Working fine now. And good to hear from you :)

- Phil
>
>>> ....<snipped>...
>>> Downgrading:
>>>    openssl-libs-1:1.1.1c-2.el8.x86_64 ubi-8-baseos                    1.5 MB
>>> Transaction Summary:
>>>    Installing:       32 packages
>>>    Reinstalling:      0 packages
>>>    Upgrading:         0 packages
>>>    Removing:          0 packages
>>>    Downgrading:       1 packages
>>> Downloading packages...
>>> Running transaction test...
>>> error: Error running transaction: package
>>> openssl-libs-1:1.1.1c-2.el8_1.1.x86_64 (which is newer than
>>> openssl-libs-1:1.1.1c-2.el8.x86_64) is already installed
>>>
>>> Thanks,
>>> - Phil
>>>
>>>
>>> _______________________________________________
>>> Ubi mailing list
>>> Ubi at redhat.com
>>> https://www.redhat.com/mailman/listinfo/ubi