Is it possible to update to a specific advisory?

Latest response

Hello Community,

I'd like to know how to update a RHEL 7.2 system to a specific advisory using the description from this guide. But first let me give you an example.

On on of my hosts I run yum updateinfo list available. Some of the listed advisories are:

RHSA-2016:0043 Moderate/Sec.  openssh-server-6.6.1p1-23.el7_2.x86_64
RHSA-2016:0465 Moderate/Sec.  openssh-server-6.6.1p1-25.el7_2.x86_64

Now I'd like to update my host to RHSA-2016:0043:

# yum update --advisory=RHSA-2016:0043
Loaded plugins: product-id, search-disabled-repos, subscription-
              : manager
 --> dracut-config-rescue-033-359.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> gnutls-3.3.8-12.el7_1.1.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> iproute-3.10.0-54.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> sudo-1.8.6p7-17.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> kexec-tools-2.0.7-38.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> nspr-4.11.0-1.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> glibc-common-2.17-105.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> 32:bind-license-9.9.4-29.el7_2.3.noarch from rhel-7-server-rpms removed (updateinfo)
 --> 1:mariadb-libs-5.5.44-2.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> 1:openssl-libs-1.0.1e-42.el7_1.9.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> dracut-network-033-359.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> pcre-8.32-15.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> avahi-autoipd-0.6.31-15.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> libuuid-2.23.2-26.el7_2.2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> gnutls-3.3.8-14.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> selinux-policy-3.13.1-60.el7.noarch from @anaconda/7.2 removed (updateinfo)
 --> systemd-libs-219-19.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> ca-certificates-2015.2.6-70.1.el7_2.noarch from rhel-7-server-rpms removed (updateinfo)
 --> 1:grub2-2.02-0.29.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> libndp-1.2-6.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> polkit-0.112-7.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> libndp-1.2-4.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> libmount-2.23.2-26.el7_2.2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 1:grub2-tools-2.02-0.34.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> nss-util-3.21.0-2.2.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 32:bind-libs-lite-9.9.4-29.el7_2.3.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> numactl-libs-2.0.9-6.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> kpartx-0.4.9-85.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> python-pyudev-0.15-7.el7.noarch from @anaconda/7.2 removed (updateinfo)
 --> 1:NetworkManager-config-server-1.0.6-30.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> nss-util-3.19.1-4.el7_1.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> dracut-config-rescue-033-360.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> cronie-1.4.11-14.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> rdma-7.2_4.1_rc6-1.el7.noarch from @anaconda/7.2 removed (updateinfo)
 --> 32:bind-libs-lite-9.9.4-29.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> coreutils-8.22-15.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 1:NetworkManager-config-server-1.0.6-27.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> tzdata-2016f-1.el7.noarch from rhel-7-server-rpms removed (updateinfo)
 --> kexec-tools-2.0.7-38.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> 1:NetworkManager-tui-1.0.6-30.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> kernel-tools-3.10.0-327.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> procps-ng-3.3.10-3.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> libblkid-2.23.2-26.el7_2.2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 1:NetworkManager-tui-1.0.6-27.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> libuuid-2.23.2-26.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> 7:device-mapper-1.02.107-5.el7_2.5.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> tzdata-2015g-1.el7.noarch from @anaconda/7.2 removed (updateinfo) --> 7:device-mapper-libs-1.02.107-5.el7_2.5.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> systemd-sysv-219-19.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> cronie-anacron-1.4.11-14.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> libgudev1-219-19.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> numactl-libs-2.0.9-5.el7_1.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> openldap-2.4.40-9.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> systemd-libs-219-19.el7_2.11.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> nss-sysinit-3.19.1-18.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> avahi-libs-0.6.31-15.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> python-perf-3.10.0-327.22.2.el7.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 1:gmp-6.0.0-11.el7.x86_64 from @anaconda/7.2 removed (updateinfo) --> 1:openssl-1.0.1e-42.el7_1.9.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> tuned-2.5.1-4.el7_2.3.noarch from rhel-7-server-rpms removed (updateinfo)
 --> 1:NetworkManager-team-1.0.6-27.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> kernel-tools-libs-3.10.0-327.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> cronie-anacron-1.4.11-14.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> iproute-3.10.0-54.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> glibc-2.17-105.el7.x86_64 from @anaconda/7.2 removed (updateinfo) --> libgudev1-219-19.el7_2.11.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> systemd-sysv-219-19.el7_2.11.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> ca-certificates-2015.2.4-71.el7.noarch from @anaconda/7.2 removed (updateinfo)
 --> util-linux-2.23.2-26.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> krb5-libs-1.13.2-12.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 1:mariadb-libs-5.5.47-1.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 1:gmp-6.0.0-12.el7_1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> initscripts-9.49.30-1.el7_2.2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> glibc-common-2.17-106.el7_2.6.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 32:bind-license-9.9.4-29.el7.noarch from @anaconda/7.2 removed (updateinfo)
 --> libssh2-1.4.3-10.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> kernel-tools-3.10.0-327.22.2.el7.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 1:openssl-libs-1.0.1e-51.el7_2.5.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> cyrus-sasl-lib-2.1.26-20.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> selinux-policy-targeted-3.13.1-60.el7.noarch from @anaconda/7.2 removed (updateinfo)
 --> nss-tools-3.21.0-9.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> teamd-1.17-5.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> libxml2-2.9.1-6.el7_2.3.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> selinux-policy-3.13.1-60.el7_2.7.noarch from rhel-7-server-rpms removed (updateinfo)
 --> chkconfig-1.3.61-5.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> procps-ng-3.3.10-5.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> cyrus-sasl-lib-2.1.26-19.2.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> pcre-8.32-15.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> avahi-autoipd-0.6.31-15.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 1:NetworkManager-libnm-1.0.6-27.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> nss-tools-3.19.1-18.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> chkconfig-1.3.61-5.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> systemd-219-19.el7_2.11.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> logrotate-3.8.6-6.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> 1:openssl-1.0.1e-51.el7_2.5.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> initscripts-9.49.30-1.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> 1:NetworkManager-1.0.6-27.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> dracut-033-360.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> polkit-0.112-5.el7.x86_64 from @anaconda/7.2 removed (updateinfo) --> libmount-2.23.2-26.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> logrotate-3.8.6-7.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> kernel-3.10.0-327.22.2.el7.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> glibc-2.17-106.el7_2.6.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> teamd-1.17-6.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> selinux-policy-targeted-3.13.1-60.el7_2.7.noarch from rhel-7-server-rpms removed (updateinfo)
 --> 1:grub2-2.02-0.34.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 7:device-mapper-1.02.107-5.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> libteam-1.17-5.el7.x86_64 from @anaconda/7.2 removed (updateinfo) --> nss-softokn-3.16.2.3-13.el7_1.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> libblkid-2.23.2-26.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> dracut-network-033-360.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> coreutils-8.22-15.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> nss-3.21.0-9.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> nss-softokn-3.16.2.3-14.2.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> nss-softokn-freebl-3.16.2.3-14.2.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 1:NetworkManager-team-1.0.6-30.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 1:NetworkManager-1.0.6-30.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> tuned-2.5.1-4.el7.noarch from @anaconda/7.2 removed (updateinfo)
 --> nss-3.19.1-18.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> libxml2-python-2.9.1-5.el7_1.2.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> 1:grub2-tools-2.02-0.29.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> nss-sysinit-3.21.0-9.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> python-pyudev-0.15-7.el7_2.1.noarch from rhel-7-server-rpms removed (updateinfo)
 --> systemd-219-19.el7.x86_64 from @anaconda/7.2 removed (updateinfo) --> sudo-1.8.6p7-16.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> dracut-033-359.el7.x86_64 from @anaconda/7.2 removed (updateinfo) --> 7:device-mapper-libs-1.02.107-5.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> krb5-libs-1.13.2-10.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> kpartx-0.4.9-85.el7_2.5.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> avahi-libs-0.6.31-15.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> kernel-tools-libs-3.10.0-327.22.2.el7.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 1:NetworkManager-libnm-1.0.6-30.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> libteam-1.17-6.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> rdma-7.2_4.1_rc6-2.el7.noarch from rhel-7-server-rpms removed (updateinfo)
 --> libxml2-python-2.9.1-6.el7_2.3.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> cronie-1.4.11-14.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> util-linux-2.23.2-26.el7_2.2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> libxml2-2.9.1-5.el7_1.2.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> openldap-2.4.40-8.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> libssh2-1.4.3-10.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> nss-softokn-freebl-3.16.2.3-13.el7_1.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> nspr-4.10.8-2.el7_1.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> python-perf-3.10.0-327.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
3 package(s) needed (+0 related) for security, out of 75 available
Resolving Dependencies
--> Running transaction check
---> Package openssh.x86_64 0:6.6.1p1-22.el7 will be updated
---> Package openssh.x86_64 0:6.6.1p1-25.el7_2 will be an update
---> Package openssh-clients.x86_64 0:6.6.1p1-22.el7 will be updated
---> Package openssh-clients.x86_64 0:6.6.1p1-25.el7_2 will be an update
---> Package openssh-server.x86_64 0:6.6.1p1-22.el7 will be updated
---> Package openssh-server.x86_64 0:6.6.1p1-25.el7_2 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

====================================================================== Package          Arch    Version           Repository           Size
======================================================================Updating:
 openssh          x86_64  6.6.1p1-25.el7_2  rhel-7-server-rpms  435 k
 openssh-clients  x86_64  6.6.1p1-25.el7_2  rhel-7-server-rpms  639 k
 openssh-server   x86_64  6.6.1p1-25.el7_2  rhel-7-server-rpms  436 k

Transaction Summary
======================================================================Upgrade  3 Packages

Total download size: 1.5 M
Is this ok [y/d/N]:

As you could see my openssh-server is not updated to version 6.6.1p1-23 from RHSA-2016:0043. Instead version 6.6.1p1-25 from RHSA-2016:0465 is being used. For me this is a problem because I need to be able to install the exact same version of a package in my staging environment. When I install RHSA-2016:0043 in my test stage today, I need to be able to install the exact same version of the openssh-server in my production stage in two or three weeks. Othewise it could happen that I got an openssh-server-6.6.1p1-23.el7_2.x86_64 in test stage but an openssh-server-6.6.1p1-25.el7_2.x86_64 in the production stage because a new RHSA is published in the meantime.

Please note that I use the openssh-server only to give an example. This issue applies to all packages in general.

Why is the newer version of the openssh-server being used instead of the version from RHSA-2016:0043? How could I install the exact version in different stages when it is possible that a new RHSA is released between the installations in testing and production?

Responses