python2-rsa package in latest release not fulfilling update-minimal needs

0

Hi,
I am running yum --security update-minimal daily on an EC2 instance powered by Amazon Linux 2. That keeps returning No package matched to upgrade: python2-rsa-0:3.4.2-3.el7 for a few days now.

Based on Amazon Linux 2 FAQ "There are no plans to change the default Python interpreter. It is our intention to retain Python 2.7 as the default for the lifetime of Amazon Linux 2. We will backport security fixes to our Python 2.7 packages as needed." I assume that the security fixes from python2-rsa-0:3.4.2-3 have been backported to the newest available package (also included in the latest AMI release = python2-rsa-3.4.1-1.amzn2.0.3.noarch).

However yum does not seem to be happy about it. I could disable yum priority plugin (in /etc/yum/pluginconf.d/priorities.conf) and install python2-rsa-0:3.4.2-3.el7 from EPEL but I would like to know whether there is another solution.

Thanks!

asked a year ago384 views
1 Answer
0

Hello,

As I understand, the python2-rsa package update to the version 3.4.2 is returning no package matched to upgrade. However, disabling the yum priority plugin can install the required package from EPEL. Upon checking the python2-rsa version on a regular Amazon Linux 2 instance using the command shown below, it showed the version as 3.4.1 from the amzn2-core repo.

$ sudo yum info python2-rsa

Please note AWS Support doesn't have visibility into package updates on Amazon Linux 2. Please refer to Amazon Linux 2 release notes [1] for further information on updated packages.

[1] Amazon Linux 2 release notes - https://docs.aws.amazon.com/AL2/latest/relnotes/relnotes-al2.html

Kindly feel free to reach out to us via a Support case [2] in case there are any specific questions regarding a CVE or service specific AMIs and package versions.

[2] Creating support cases and case management - Creating a support case - https://docs.aws.amazon.com/awssupport/latest/user/case-management.html#creating-a-support-case

AWS
Rahul_G
answered a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions