[UBI] Latest UBI content has openssl-libs conflict?

Josh Boyer jwboyer at redhat.com
Mon Apr 13 22:29:41 UTC 2020


On Mon, Apr 13, 2020 at 10:13 AM Josh Boyer <jwboyer at redhat.com> wrote:
>
> On Mon, Apr 13, 2020 at 10:03 AM Phil Estes <estesp at gmail.com> wrote:
>>
>> I assumed others would be hitting this with the latest ubi8-minimal, but
>> in case it hasn't been seen/reported, it appears there is some strange
>> conflict with an openssl update from the latest CVEs released and UBI8
>> minimal.
>>
>> One easy way to recreate is to update your image from one of the RH
>> registries to the latest ubi8 minimal. In my case that gets me this image:
>> registry.access.redhat.com/ubi8/ubi-minimal   latest 91d23a64fdf2
>> 12 days ago         107MB
>>
>> Then either run it interactively and try `microdnf install go-toolset`
>> or run a build that installs go-toolset and after building the
>> transaction, you can see that it wants to downgrade openssl, and then
>> fails with the error below:
>
>
> Yep, reported and we have people looking at it now.  Apologies for the issues here and we hope to get to root cause soon.

The issue should be resolved now.  If you are still having trouble,
please let us know.

josh

>> ....<snipped>...
>> Downgrading:
>>   openssl-libs-1:1.1.1c-2.el8.x86_64 ubi-8-baseos                    1.5 MB
>> Transaction Summary:
>>   Installing:       32 packages
>>   Reinstalling:      0 packages
>>   Upgrading:         0 packages
>>   Removing:          0 packages
>>   Downgrading:       1 packages
>> Downloading packages...
>> Running transaction test...
>> error: Error running transaction: package
>> openssl-libs-1:1.1.1c-2.el8_1.1.x86_64 (which is newer than
>> openssl-libs-1:1.1.1c-2.el8.x86_64) is already installed
>>
>> Thanks,
>> - Phil
>>
>>
>> _______________________________________________
>> Ubi mailing list
>> Ubi at redhat.com
>> https://www.redhat.com/mailman/listinfo/ubi





More information about the Ubi mailing list