Don’t update nss-softokn-freebl-3.14.3-19.el6_6.x86_64

On my repo. after #yum update.

new kernel cannot get reboot because of initramfs failed to generate.

If this time reboot the os, kernel will fail anyway.

because /usr/lib64/libfreebl3.chk  is not yet provided in new kernel.

Temp fix is to use old version nss-softokn-freebl for now.

 

update: Mon Jan 19 14:23:26 CST 2015

I filed oracle bug#20369394, CentOS bug#0008083

For upStream bug#
Bug 1182297 – nss-softokn prevents dracut from building the initrd

Waiting for a fix in

 

=======================================================

 

 

update:  Fri Jan 30 17:07:57 CST 2015

Bug Fix Advisory nss-softokn bug fix update

Bug is now fixed in : nss-softokn-freebl-3.14.3-22.el6_6.x86_64.rpm

Also oracle has new el-errata
[El-errata] ELBA-2015-0110 Oracle Linux 6 nss-softokn bug fix update

4 thoughts on “Don’t update nss-softokn-freebl-3.14.3-19.el6_6.x86_64”

  1. It was very late for me. System was mounting in read only mode and throwing more errors than time which can be spent to reinstall CentOS on my new, clean VPS. However, thank you for answer.

  2. Hey flashbag,

    thanks for the update.

    I also failed on a whole ORACLE RAC cluster. and cost half day to recover the environment.

    I dont know how to quick updating more guys. but they should put off the package 3.14.3-19 from repo. at least for now…

    As version 19 did only fix some app corruption issues, but involves more serious problems.

    Thanks,
    -suse

  3. Another W/R:

    1.) fresh install os.

    2.) yum update kernel # which will run on old nss-softokn version and will be fine.

    3.) yum update # after this step, os will not need to rebuild initramfs. System will not crash .

    4.) wait for nss-softokn version 20, and #yum update.

    Thanks,
    -suse

  4. From upstream bug#
    https://bugzilla.redhat.com/show_bug.cgi?id=1182297

    ————————————————————–

    Vincent S. Cojot 2015-01-20 12:39:49 EST

    The package still isn’t released on RHN.
    I worked around the issue by doing this:

    # dracut -f
    E: Failed to install /usr/lib64/libfreebl3.chk

    # cd /usr/lib64/

    # /usr/lib64/nss/unsupported-tools/shlibsign -v -i libfreebl3.so
    moduleSpec configdir=” certPrefix=” keyPrefix=” secmod=” flags=noCertDB, noModDB
    Generate a DSA key pair …
    Library File: ../../lib64/libfreebl3.so 12776 bytes
    Check File: ../../lib64/libfreebl3.chk
    Link: libfreebl3.chk
    hash: 32 bytes
    [….]

    This allowed dracut to run..

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.