How should I downgrade nss on RHEL ?

abhisheks77 · 10-07-2017, 02:14 PM

Hello,
I have RHEL 6.2 running on x86 VMWare. That had default nss-3.12 installed on that. To fix one issue, I mounted RHEL 6.9 on this and installed nss-3.27 and it screwed up more things. Now I want to remove nss-3.27 and install back nss-3.12.
I have both iso on server locally and mount them as repo, but not sure, how should I downgrade it.

Code:

[root@server1 /]# yum list | grep -i nss.x86
nss.x86_64                             3.27.1-13.el6               @InstallMedia
python-nss.x86_64                      0.11-3.el6                  @anaconda-RedHatEnterpriseLinux-201111171049.x86_64/6.2
mod_nss.x86_64                         1.0.8-13.el6                InstallMedia
[root@server1 /]#
[root@server1 /]# ls -l /mnt/iso/Packages/ | grep -i nss-3.12
-r--r--r--  99 root root   797076 Nov  9  2011 nss-3.12.10-16.el6.i686.rpm
-r--r--r--  57 root root   794672 Nov  9  2011 nss-3.12.10-16.el6.x86_64.rpm
[root@server1 /]#
[root@server1 /]# rpm -qa | grep -i nss
nss-sysinit-3.27.1-13.el6.x86_64
nss-softokn-freebl-3.14.3-23.3.el6_8.i686
nss-softokn-3.14.3-23.3.el6_8.i686
openssh-clients-5.3p1-70.el6.x86_64
nss_compat_ossl-0.9.6-1.el6.x86_64
pyOpenSSL-0.10-2.el6.x86_64
python-nss-0.11-3.el6.x86_64
nss-softokn-freebl-3.14.3-23.3.el6_8.x86_64
nss-softokn-3.14.3-23.3.el6_8.x86_64
nss-3.27.1-13.el6.x86_64
nss-pam-ldapd-0.7.5-14.el6.x86_64
openssl-1.0.1e-57.el6.x86_64
nss-3.27.1-13.el6.i686
openssh-server-5.3p1-70.el6.x86_64
openssh-5.3p1-70.el6.x86_64
nss-util-3.27.1-3.el6.x86_64
nss-util-3.27.1-3.el6.i686
nss-tools-3.27.1-13.el6.x86_64
[root@server1 /]#

TB0ne · 10-08-2017, 09:27 AM

Quote:

Originally Posted by abhisheks77

Hello,
I have RHEL 6.2 running on x86 VMWare. That had default nss-3.12 installed on that. To fix one issue, I mounted RHEL 6.9 on this and installed nss-3.27 and it screwed up more things. Now I want to remove nss-3.27 and install back nss-3.12. I have both iso on server locally and mount them as repo, but not sure, how should I downgrade it.

As you've been told each time you post about Red Hat Enterprise (for your COMPANY), you need to PAY FOR RHEL, period. Call their support for help, and if your 'company' doesn't want to, then why are you not using CentOS instead???

You've also been using Linux for a while now, and have installed packages before. This is no different; read the man page for the rpm and/or yum commands. "rpm -e" or "yum remove" <package name> will remove it. "rpm -i"/"yum install" <package name> will install a new one.

And AGAIN, as you've been told many times before, unless you PAY FOR RHEL, you WILL NOT be able to successfully use yum to remove/install things, since ALL the dependencies will also fail. Pay for RHEL.

MadeInGermany · 10-08-2017, 03:21 PM

I wonder if the nss package is so essential that after its removal an rpm -i would fail.
Safer is a direct downgrade.

Code:

rpm -Uvh --oldpackage nss-3.12.10-16.el6.x86_64.rpm

TB0ne · 10-08-2017, 03:58 PM

Quote:

Originally Posted by MadeInGermany

I wonder if the nss package is so essential that after its removal an rpm -i would fail.
Safer is a direct downgrade.

Code:

rpm -Uvh --oldpackage nss-3.12.10-16.el6.x86_64.rpm

Yep...that's why the OP has been told several times in the past to:

Pay for RHEL
Use 'yum' for such things, since it'll resolve/correct dependency issues.

But each time the ignore this advice.

!!! · 10-08-2017, 05:36 PM

If "COMPANY" considers 'security': https://access.redhat.com/errata/RHSA-2017:1102