Is it possible to update to a specific advisory?

Latest response

Hello Community,

I'd like to know how to update a RHEL 7.2 system to a specific advisory using the description from this guide. But first let me give you an example.

On on of my hosts I run yum updateinfo list available. Some of the listed advisories are:

RHSA-2016:0043 Moderate/Sec.  openssh-server-6.6.1p1-23.el7_2.x86_64
RHSA-2016:0465 Moderate/Sec.  openssh-server-6.6.1p1-25.el7_2.x86_64

Now I'd like to update my host to RHSA-2016:0043:

# yum update --advisory=RHSA-2016:0043
Loaded plugins: product-id, search-disabled-repos, subscription-
              : manager
 --> dracut-config-rescue-033-359.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> gnutls-3.3.8-12.el7_1.1.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> iproute-3.10.0-54.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> sudo-1.8.6p7-17.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> kexec-tools-2.0.7-38.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> nspr-4.11.0-1.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> glibc-common-2.17-105.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> 32:bind-license-9.9.4-29.el7_2.3.noarch from rhel-7-server-rpms removed (updateinfo)
 --> 1:mariadb-libs-5.5.44-2.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> 1:openssl-libs-1.0.1e-42.el7_1.9.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> dracut-network-033-359.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> pcre-8.32-15.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> avahi-autoipd-0.6.31-15.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> libuuid-2.23.2-26.el7_2.2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> gnutls-3.3.8-14.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> selinux-policy-3.13.1-60.el7.noarch from @anaconda/7.2 removed (updateinfo)
 --> systemd-libs-219-19.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> ca-certificates-2015.2.6-70.1.el7_2.noarch from rhel-7-server-rpms removed (updateinfo)
 --> 1:grub2-2.02-0.29.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> libndp-1.2-6.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> polkit-0.112-7.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> libndp-1.2-4.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> libmount-2.23.2-26.el7_2.2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 1:grub2-tools-2.02-0.34.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> nss-util-3.21.0-2.2.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 32:bind-libs-lite-9.9.4-29.el7_2.3.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> numactl-libs-2.0.9-6.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> kpartx-0.4.9-85.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> python-pyudev-0.15-7.el7.noarch from @anaconda/7.2 removed (updateinfo)
 --> 1:NetworkManager-config-server-1.0.6-30.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> nss-util-3.19.1-4.el7_1.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> dracut-config-rescue-033-360.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> cronie-1.4.11-14.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> rdma-7.2_4.1_rc6-1.el7.noarch from @anaconda/7.2 removed (updateinfo)
 --> 32:bind-libs-lite-9.9.4-29.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> coreutils-8.22-15.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 1:NetworkManager-config-server-1.0.6-27.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> tzdata-2016f-1.el7.noarch from rhel-7-server-rpms removed (updateinfo)
 --> kexec-tools-2.0.7-38.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> 1:NetworkManager-tui-1.0.6-30.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> kernel-tools-3.10.0-327.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> procps-ng-3.3.10-3.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> libblkid-2.23.2-26.el7_2.2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 1:NetworkManager-tui-1.0.6-27.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> libuuid-2.23.2-26.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> 7:device-mapper-1.02.107-5.el7_2.5.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> tzdata-2015g-1.el7.noarch from @anaconda/7.2 removed (updateinfo) --> 7:device-mapper-libs-1.02.107-5.el7_2.5.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> systemd-sysv-219-19.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> cronie-anacron-1.4.11-14.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> libgudev1-219-19.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> numactl-libs-2.0.9-5.el7_1.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> openldap-2.4.40-9.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> systemd-libs-219-19.el7_2.11.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> nss-sysinit-3.19.1-18.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> avahi-libs-0.6.31-15.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> python-perf-3.10.0-327.22.2.el7.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 1:gmp-6.0.0-11.el7.x86_64 from @anaconda/7.2 removed (updateinfo) --> 1:openssl-1.0.1e-42.el7_1.9.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> tuned-2.5.1-4.el7_2.3.noarch from rhel-7-server-rpms removed (updateinfo)
 --> 1:NetworkManager-team-1.0.6-27.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> kernel-tools-libs-3.10.0-327.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> cronie-anacron-1.4.11-14.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> iproute-3.10.0-54.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> glibc-2.17-105.el7.x86_64 from @anaconda/7.2 removed (updateinfo) --> libgudev1-219-19.el7_2.11.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> systemd-sysv-219-19.el7_2.11.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> ca-certificates-2015.2.4-71.el7.noarch from @anaconda/7.2 removed (updateinfo)
 --> util-linux-2.23.2-26.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> krb5-libs-1.13.2-12.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 1:mariadb-libs-5.5.47-1.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 1:gmp-6.0.0-12.el7_1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> initscripts-9.49.30-1.el7_2.2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> glibc-common-2.17-106.el7_2.6.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 32:bind-license-9.9.4-29.el7.noarch from @anaconda/7.2 removed (updateinfo)
 --> libssh2-1.4.3-10.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> kernel-tools-3.10.0-327.22.2.el7.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 1:openssl-libs-1.0.1e-51.el7_2.5.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> cyrus-sasl-lib-2.1.26-20.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> selinux-policy-targeted-3.13.1-60.el7.noarch from @anaconda/7.2 removed (updateinfo)
 --> nss-tools-3.21.0-9.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> teamd-1.17-5.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> libxml2-2.9.1-6.el7_2.3.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> selinux-policy-3.13.1-60.el7_2.7.noarch from rhel-7-server-rpms removed (updateinfo)
 --> chkconfig-1.3.61-5.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> procps-ng-3.3.10-5.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> cyrus-sasl-lib-2.1.26-19.2.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> pcre-8.32-15.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> avahi-autoipd-0.6.31-15.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 1:NetworkManager-libnm-1.0.6-27.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> nss-tools-3.19.1-18.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> chkconfig-1.3.61-5.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> systemd-219-19.el7_2.11.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> logrotate-3.8.6-6.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> 1:openssl-1.0.1e-51.el7_2.5.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> initscripts-9.49.30-1.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> 1:NetworkManager-1.0.6-27.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> dracut-033-360.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> polkit-0.112-5.el7.x86_64 from @anaconda/7.2 removed (updateinfo) --> libmount-2.23.2-26.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> logrotate-3.8.6-7.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> kernel-3.10.0-327.22.2.el7.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> glibc-2.17-106.el7_2.6.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> teamd-1.17-6.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> selinux-policy-targeted-3.13.1-60.el7_2.7.noarch from rhel-7-server-rpms removed (updateinfo)
 --> 1:grub2-2.02-0.34.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 7:device-mapper-1.02.107-5.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> libteam-1.17-5.el7.x86_64 from @anaconda/7.2 removed (updateinfo) --> nss-softokn-3.16.2.3-13.el7_1.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> libblkid-2.23.2-26.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> dracut-network-033-360.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> coreutils-8.22-15.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> nss-3.21.0-9.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> nss-softokn-3.16.2.3-14.2.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> nss-softokn-freebl-3.16.2.3-14.2.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 1:NetworkManager-team-1.0.6-30.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 1:NetworkManager-1.0.6-30.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> tuned-2.5.1-4.el7.noarch from @anaconda/7.2 removed (updateinfo)
 --> nss-3.19.1-18.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> libxml2-python-2.9.1-5.el7_1.2.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> 1:grub2-tools-2.02-0.29.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> nss-sysinit-3.21.0-9.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> python-pyudev-0.15-7.el7_2.1.noarch from rhel-7-server-rpms removed (updateinfo)
 --> systemd-219-19.el7.x86_64 from @anaconda/7.2 removed (updateinfo) --> sudo-1.8.6p7-16.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> dracut-033-359.el7.x86_64 from @anaconda/7.2 removed (updateinfo) --> 7:device-mapper-libs-1.02.107-5.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> krb5-libs-1.13.2-10.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> kpartx-0.4.9-85.el7_2.5.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> avahi-libs-0.6.31-15.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> kernel-tools-libs-3.10.0-327.22.2.el7.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> 1:NetworkManager-libnm-1.0.6-30.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> libteam-1.17-6.el7_2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> rdma-7.2_4.1_rc6-2.el7.noarch from rhel-7-server-rpms removed (updateinfo)
 --> libxml2-python-2.9.1-6.el7_2.3.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> cronie-1.4.11-14.el7_2.1.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> util-linux-2.23.2-26.el7_2.2.x86_64 from rhel-7-server-rpms removed (updateinfo)
 --> libxml2-2.9.1-5.el7_1.2.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> openldap-2.4.40-8.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> libssh2-1.4.3-10.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> nss-softokn-freebl-3.16.2.3-13.el7_1.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> nspr-4.10.8-2.el7_1.x86_64 from @anaconda/7.2 removed (updateinfo)
 --> python-perf-3.10.0-327.el7.x86_64 from @anaconda/7.2 removed (updateinfo)
3 package(s) needed (+0 related) for security, out of 75 available
Resolving Dependencies
--> Running transaction check
---> Package openssh.x86_64 0:6.6.1p1-22.el7 will be updated
---> Package openssh.x86_64 0:6.6.1p1-25.el7_2 will be an update
---> Package openssh-clients.x86_64 0:6.6.1p1-22.el7 will be updated
---> Package openssh-clients.x86_64 0:6.6.1p1-25.el7_2 will be an update
---> Package openssh-server.x86_64 0:6.6.1p1-22.el7 will be updated
---> Package openssh-server.x86_64 0:6.6.1p1-25.el7_2 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

====================================================================== Package          Arch    Version           Repository           Size
======================================================================Updating:
 openssh          x86_64  6.6.1p1-25.el7_2  rhel-7-server-rpms  435 k
 openssh-clients  x86_64  6.6.1p1-25.el7_2  rhel-7-server-rpms  639 k
 openssh-server   x86_64  6.6.1p1-25.el7_2  rhel-7-server-rpms  436 k

Transaction Summary
======================================================================Upgrade  3 Packages

Total download size: 1.5 M
Is this ok [y/d/N]:

As you could see my openssh-server is not updated to version 6.6.1p1-23 from RHSA-2016:0043. Instead version 6.6.1p1-25 from RHSA-2016:0465 is being used. For me this is a problem because I need to be able to install the exact same version of a package in my staging environment. When I install RHSA-2016:0043 in my test stage today, I need to be able to install the exact same version of the openssh-server in my production stage in two or three weeks. Othewise it could happen that I got an openssh-server-6.6.1p1-23.el7_2.x86_64 in test stage but an openssh-server-6.6.1p1-25.el7_2.x86_64 in the production stage because a new RHSA is published in the meantime.

Please note that I use the openssh-server only to give an example. This issue applies to all packages in general.

Why is the newer version of the openssh-server being used instead of the version from RHSA-2016:0043? How could I install the exact version in different stages when it is possible that a new RHSA is released between the installations in testing and production?

Responses

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.