WARNING: nss-softokn-3.14.3-19.el6_6 updates may be broken

General support questions
Locked
User avatar
TrevorH
Site Admin
Posts: 33202
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

WARNING: nss-softokn-3.14.3-19.el6_6 updates may be broken

Post by TrevorH » 2015/01/14 20:39:03

Do not install nss-softokn-3.14.3-19.el6_6 and related updates. These packages were released today 14/01/2015. There have been reports of problems with this set of packages and they are in the process of being pulled from the mirror network while we investigate. Some mirrors may already have the (potentially) broken packages, others may not yet have them.

Edit: the symptom of these packages being installed is that the rpm database is corrupted.

Do NOT under any circumstances run rpm --rebuilddb to try to correct the database. Your rpm database is fine, it's the code to access it that is broken by missing libraries. If you attempt to rebuild it while the system is broken then it will destroy it!
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

User avatar
avij
Retired Moderator
Posts: 3046
Joined: 2010/12/01 19:25:52
Location: Helsinki, Finland
Contact:

Re: WARNING: nss-softokn-3.14.3-19.el6_6 updates may be brok

Post by avij » 2015/01/14 23:00:48

nss-softokn-3.14.3-19 needs nss-softokn-freebl-3.14.3-19 to operate properly, and vice versa. However, those packages do not have checks in place to make sure that a matching version of the other package is installed.

Those of you who update your systems with yum update (as you should) are safe -- yum will update both packages at the same time and there will be no problems.

Those of you who update packages one package at a time, for example with yum update nss-softokn, will end up with non-matching versions of nss-softokn and nss-softokn-freebl. rpm does not like this. If you end up in this situation and rpm/yum stops working, download nss-softokn-freebl-3.14.3-19.el6_6.x86_64.rpm from a nearby mirror, extract it with rpm2cpio nss-softokn-freebl-3.14.3-19.el6_6.x86_64.rpm | cpio -idmv and copy ./lib64/libfreeblpriv3.* to /lib64. This should make rpm and yum work and you can run yum update again. For i686, replace lib64 with lib and x86_64 with i686 in the instructions.

Yes, nss-softokn should enforce that a matching nss-softokn-freebl is installed. hughesjr has filed an upstream bug to have this fixed.

As the behaviour of the CentOS packages is the same as upstream, the 3.14.3-19 packages are currently being re-released and pushed to mirrors.

User avatar
avij
Retired Moderator
Posts: 3046
Joined: 2010/12/01 19:25:52
Location: Helsinki, Finland
Contact:

Re: WARNING: nss-softokn-3.14.3-19.el6_6 updates may be brok

Post by avij » 2015/01/20 07:55:11

As TrevorH said above, do not try to fix this problem by running rpm --rebuilddb. It will only make things worse.

If you have managed to wipe out your rpm database with that command, this post describes one method to recover your rpm database. Restoring the rpm database from backups would be the primary option, of course.

giuseppe
Posts: 1
Joined: 2015/01/22 12:24:42

Re: WARNING: nss-softokn-3.14.3-19.el6_6 updates may be brok

Post by giuseppe » 2015/01/22 12:30:50

Hi all, first time here.

First, thank you to provide the solution! I solved for all my systems 64bit.
How to for a 32bit?

Best
Giuseppe

User avatar
avij
Retired Moderator
Posts: 3046
Joined: 2010/12/01 19:25:52
Location: Helsinki, Finland
Contact:

Re: WARNING: nss-softokn-3.14.3-19.el6_6 updates may be brok

Post by avij » 2015/01/22 15:20:43

For i686, replace lib64 with lib and x86_64 with i686 in the instructions.

Locked