redhat / centos upgrade warning

peterwalkley · 1 Aug 2020 at 10:08

Watch out if you are running redhat or centos: there is a stuffed update that can cause your system to become unbootable: https://bugzilla.redhat.com/show_bug.cgi?id=1861977

I ran a yum update as normal and its knackered, none of the suggestions on various threads fix it for me as yet.

EDIT: ISSUE IS FIXED.

opethdisciple · 1 Aug 2020 at 11:51

I was just about to start a thread on this. I'm confused to be honest.

We run Centos 7 at work which apparently is also affected. However I can see posts from the Centos team implying they have issued updated packages.

For example:

Start of thread post

Next post regarding updated files

Next post regarding updated files

And the last one

These posts imply the Centos team (and they work downstream from Red Hat so that implies Red Hat have the files too) have patched the issue with new files.

But I am unsure either way if it is or isn't resolved. From your post it seems it isn't.

But I am confused. :/

The official Red Hat remediation for this issue is found here.

peterwalkley · 1 Aug 2020 at 13:05

If it helps any, I'm running Centos 8.2.2004, not 7. It was just last night I ran the yum update (about 8pm 31st July ...) IF they've fixed it, the fixes aren't on the mirrors yet and I'm not noticing anything new when I try an update again - once I can get in via the troubleshooting mode (and also chroot and get the networking running).

If you've not updated yet, I'd advise very strongly to not do it for at least a week until the picture is clearer.

opethdisciple · 4 Aug 2020 at 22:14

Apparently the fixes for this issue are now available.

Probably best as mentioned earlier to give it until next week to apply the patches to be on the safe side.

peterwalkley · 5 Aug 2020 at 20:07

Phew !

Recovered mine using the instructions in here: https://forums.centos.org/viewtopic.php?f=54&t=75227&sid=a470bed7e8c8e1167648d395b6fd2a50

That was .... fun

It looks safe to do a normal yum update if you haven't already done it. The broken version of the shim has been superseded so won't get installed. Brown alert over.