0

I was asked to fix the vulnerabilities for RHEL 7: GLIBC(RHSA-2018:3092). Based on the output given by Nessus.

Remote package installed : glibc-2.17-222.el7
Should be                : glibc-2.17-260.el7

Remote package installed : glibc-common-2.17-222.el7
Should be                : glibc-common-2.17-260.el7

Remote package installed : glibc-devel-2.17-222.el7
Should be                : glibc-devel-2.17-260.el7

Remote package installed : glibc-headers-2.17-222.el7
Should be                : glibc-headers-2.17-260.el7

I tried to update all the rpm packages by the following command rpm -Uvh and it gave me the error failed dependencies. It said that glibc-common is needed but I include that package when updating in the command. Here is the command and the output below.

Command and the output

I am using x86_64 red hat server and when I found that glibc has 2 package orginally. which are i686 and x86_64.

enter image description here

I am using rpm package to update instead of yum.

migrated from security.stackexchange.com Dec 4 '18 at 9:35

This question came from our site for information security professionals.

  • This question is more for the Red-Hat forum that a security forum, your problem is with dependencies something that is out of scope of this forum – camp0 Dec 4 '18 at 8:21
0

You have 32bit libraries installed as well (note the error refers to an i686 package) so you need to upgrade those at the same time.

In general this is what yum will do for you. yum update glibc should handle all the dependencies but won't update packages that aren't impacted.

  • yes I know that yum handle all the dependencies. Is there any other ways to do it? – Abdullah Naina Dec 5 '18 at 13:15
  • However, there are 2 package installed which are i686 and x64 – Abdullah Naina Dec 5 '18 at 13:55
  • "you need to upgrade those at the same time" – Stephen Harris Dec 5 '18 at 15:21

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.