Recent errata not applicable

Problem:
Some recently synced CentOS errata is not visible in the web UI as applicable. When “Applicable” is unchecked, the errata is visible. All are applicable to running systems, which can access the packages via yum.

Expected outcome:
To see applicable errata

Foreman and Proxy versions:
foreman 1.24.3
katello 3.14.1
Foreman and Proxy plugin versions:

Distribution and version:
CentOS 7.8

Other relevant data:

Let me know what you need to see.

CentOS repositories don’t have errata. They don’t show available errata. Only other repositories like from Redhat or EPEL have errata. I think you have to elaborate what your problem is…

For CentOS 7 there is a little script for importing errata from cefs.

https://cefs.steve-meier.de/

Maybe it is a solution for you.

So, if I did not know how to import errata, how would it be visible?

Since I must assume that you are not ignorant, I imported the CentOS errata via the usual source and method, as we have for some time. Sorry for being insufficiently elaborative. I’ll try to provide more information.

Here are two screenshots that illustrate the problem. The first shows “Applicable” checked and the second without. The text below shows all updates since 1 May, assuming that some recent change caused this behavioral aberrancy.


May 01 08:12:59 Installed: pulp-rpm-yumplugins-2.21.1-1.el7.noarch
May 04 06:12:33 Installed: ansifilter-1.12-1.el7.x86_64
May 04 07:47:19 Updated: puppet-agent-6.15.0-1.el7.x86_64
May 04 07:47:24 Updated: puppetserver-6.11.0-1.el7.noarch
May 04 08:03:04 Installed: pulp-rpm-plugins-2.21.1-1.el7.noarch
May 04 08:03:05 Installed: pulp-rpm-yumplugins-2.21.1-1.el7.noarch
May 04 08:05:22 Installed: pulp-rpm-plugins-2.21.1-1.el7.noarch
May 04 08:44:45 Erased: pulp-client-1.0-8.noarch
May 04 11:14:09 Erased: pulp-rpm-yumplugins-2.21.1-1.el7.noarch
May 12 09:07:09 Updated: puppetserver-6.11.1-1.el7.noarch
May 13 08:08:17 Updated: git-1.8.3.1-22.el7_8.x86_64
May 13 08:08:17 Updated: perl-Git-1.8.3.1-22.el7_8.noarch
May 13 08:08:18 Updated: tzdata-java-2020a-1.el7.noarch
May 13 08:08:24 Updated: 1:java-1.8.0-openjdk-headless-1.8.0.252.b09-2.el7_8.x86_64
May 13 08:08:30 Updated: scap-security-guide-0.1.46-11.0.2.el7.noarch
May 13 08:08:30 Installed: python36-rpmconf-1.0.22-1.el7.noarch
May 13 08:08:30 Installed: python36-rpm-4.11.3-7.el7.x86_64
May 13 08:08:30 Installed: rpmconf-base-1.0.22-1.el7.noarch
May 13 08:08:30 Updated: python2-jmespath-0.9.4-2.el7.noarch
May 13 08:08:30 Updated: 7:squid-migration-script-3.5.20-15.el7_8.1.x86_64
May 13 08:08:34 Updated: 7:squid-3.5.20-15.el7_8.1.x86_64
May 13 08:08:59 Updated: ansible-2.9.7-1.el7.noarch
May 13 08:08:59 Updated: rpmconf-1.0.22-1.el7.noarch
May 13 08:09:01 Updated: scap-security-guide-doc-0.1.46-11.0.2.el7.noarch
May 13 08:09:01 Updated: 1:java-1.8.0-openjdk-1.8.0.252.b09-2.el7_8.x86_64
May 13 08:09:15 Updated: chef-16.0.287-1.el7.x86_64
May 13 08:09:16 Updated: qpid-dispatch-router-1.11.0-1.el7.x86_64
May 13 08:09:18 Updated: tzdata-2020a-1.el7.noarch
May 13 08:09:24 Updated: pmm2-client-2.6.0-6.el7.x86_64
May 13 08:09:24 Updated: 1:libuv-1.37.0-1.el7.x86_64
May 13 08:09:24 Updated: tuned-2.11.0-8.0.2.el7.noarch
May 19 13:57:37 Updated: systemd-libs-219-73.0.1.el7_8.6.x86_64
May 19 13:57:41 Updated: systemd-219-73.0.1.el7_8.6.x86_64
May 19 13:57:41 Updated: libsss_certmap-1.16.4-37.0.1.el7_8.3.x86_64
May 19 13:57:41 Updated: libsss_idmap-1.16.4-37.0.1.el7_8.3.x86_64
May 19 13:57:41 Updated: samba-common-4.10.4-11.el7_8.noarch
May 19 13:57:41 Updated: libwbclient-4.10.4-11.el7_8.x86_64
May 19 13:57:42 Updated: samba-client-libs-4.10.4-11.el7_8.x86_64
May 19 13:57:43 Updated: samba-libs-4.10.4-11.el7_8.x86_64
May 19 13:57:43 Updated: samba-common-libs-4.10.4-11.el7_8.x86_64
May 19 13:57:44 Updated: mesa-libglapi-18.3.4-7.el7_8.1.x86_64
May 19 13:57:44 Updated: 7:device-mapper-libs-1.02.164-7.0.1.el7_8.2.x86_64
May 19 13:57:44 Updated: 7:device-mapper-1.02.164-7.0.1.el7_8.2.x86_64
May 19 13:57:44 Updated: 7:device-mapper-event-libs-1.02.164-7.0.1.el7_8.2.x86_64
May 19 13:57:45 Updated: postgresql-libs-9.2.24-4.el7_8.x86_64
May 19 13:57:45 Updated: 32:bind-license-9.11.4-16.P2.el7_8.3.noarch
May 19 13:57:45 Updated: 32:bind-libs-lite-9.11.4-16.P2.el7_8.3.x86_64
May 19 13:57:45 Updated: 32:bind-libs-9.11.4-16.P2.el7_8.3.x86_64
May 19 13:57:45 Updated: 32:bind-utils-9.11.4-16.P2.el7_8.3.x86_64
May 19 13:57:47 Updated: postgresql-9.2.24-4.el7_8.x86_64
May 19 13:57:47 Updated: 7:device-mapper-event-1.02.164-7.0.1.el7_8.2.x86_64
May 19 13:57:48 Updated: 7:lvm2-libs-2.02.186-7.0.1.el7_8.2.x86_64
May 19 13:57:48 Updated: mesa-libgbm-18.3.4-7.el7_8.1.x86_64
May 19 13:57:48 Updated: libsmbclient-4.10.4-11.el7_8.x86_64
May 19 13:57:48 Updated: systemd-sysv-219-73.0.1.el7_8.6.x86_64
May 19 13:57:48 Updated: libipa_hbac-1.16.4-37.0.1.el7_8.3.x86_64
May 19 13:57:48 Updated: libsss_autofs-1.16.4-37.0.1.el7_8.3.x86_64
May 19 13:57:48 Updated: libsss_nss_idmap-1.16.4-37.0.1.el7_8.3.x86_64
May 19 13:57:48 Updated: sssd-client-1.16.4-37.0.1.el7_8.3.x86_64
May 19 13:57:48 Updated: libsss_sudo-1.16.4-37.0.1.el7_8.3.x86_64
May 19 13:57:49 Updated: sssd-common-1.16.4-37.0.1.el7_8.3.x86_64
May 19 13:57:49 Updated: sssd-krb5-common-1.16.4-37.0.1.el7_8.3.x86_64
May 19 13:57:49 Updated: sssd-common-pac-1.16.4-37.0.1.el7_8.3.x86_64
May 19 13:57:49 Updated: sssd-ad-1.16.4-37.0.1.el7_8.3.x86_64
May 19 13:57:49 Updated: sssd-ipa-1.16.4-37.0.1.el7_8.3.x86_64
May 19 13:57:50 Updated: sssd-ldap-1.16.4-37.0.1.el7_8.3.x86_64
May 19 13:57:50 Updated: sssd-krb5-1.16.4-37.0.1.el7_8.3.x86_64
May 19 13:57:50 Updated: sssd-proxy-1.16.4-37.0.1.el7_8.3.x86_64
May 19 13:57:50 Updated: python-sssdconfig-1.16.4-37.0.1.el7_8.3.noarch
May 19 13:57:50 Updated: sssd-1.16.4-37.0.1.el7_8.3.x86_64
May 19 13:57:51 Updated: postgresql-server-9.2.24-4.el7_8.x86_64
May 19 13:57:51 Updated: mesa-libEGL-18.3.4-7.el7_8.1.x86_64
May 19 13:57:51 Updated: 7:lvm2-2.02.186-7.0.1.el7_8.2.x86_64
May 19 13:57:51 Updated: mesa-libGL-18.3.4-7.el7_8.1.x86_64
May 19 13:57:55 Updated: containerd.io-1.2.13-3.2.el7.x86_64
May 19 13:57:55 Updated: systemd-devel-219-73.0.1.el7_8.6.x86_64
May 19 13:57:55 Updated: systemd-python-219-73.0.1.el7_8.6.x86_64
May 19 13:57:56 Updated: open-vm-tools-10.3.10-2.0.1.el7_8.1.x86_64
May 19 13:57:56 Updated: libgudev1-219-73.0.1.el7_8.6.x86_64
May 19 13:57:56 Updated: 32:bind-export-libs-9.11.4-16.P2.el7_8.3.x86_64
May 19 13:57:57 Updated: python-perf-3.10.0-1127.8.2.el7.x86_64
May 19 13:58:07 Installed: kernel-3.10.0-1127.8.2.el7.x86_64
May 19 13:58:19 Updated: chef-16.1.0-1.el7.x86_64
May 19 13:58:19 Updated: yum-utils-1.1.31-54.0.1.el7_8.noarch
May 19 13:58:20 Updated: binutils-2.27-43.base.0.1.el7_8.1.x86_64
May 19 13:58:22 Updated: kernel-headers-3.10.0-1127.8.2.el7.x86_64
May 20 08:39:09 Updated: python-pulp-common-2.21.2-1.el7.noarch
May 20 08:39:10 Updated: python-pulp-repoauth-2.21.2-1.el7.noarch
May 20 08:39:10 Updated: python-pulp-puppet-common-2.21.2-1.el7.noarch
May 20 08:39:10 Updated: python-pulp-rpm-common-2.21.2-1.el7.noarch
May 20 08:39:10 Updated: python-pulp-oid_validation-2.21.2-1.el7.noarch
May 20 08:39:10 Updated: python-pulp-bindings-2.21.2-1.el7.noarch
May 20 08:39:10 Updated: python-pulp-client-lib-2.21.2-1.el7.noarch
May 20 08:39:10 Updated: pulp-admin-client-2.21.2-1.el7.noarch
May 20 08:40:13 Updated: pulp-selinux-2.21.2-1.el7.noarch
May 20 08:40:22 Updated: pulp-server-2.21.2-1.el7.noarch
May 20 08:40:22 Updated: python-pulp-streamer-2.21.2-1.el7.noarch
May 20 08:40:23 Updated: pulp-puppet-plugins-2.21.2-1.el7.noarch
May 20 08:40:23 Updated: pulp-rpm-plugins-2.21.2-1.el7.noarch
May 20 08:40:23 Updated: pulp-rpm-admin-extensions-2.21.2-1.el7.noarch
May 20 08:40:23 Updated: pulp-puppet-tools-2.21.2-1.el7.noarch
May 20 09:38:32 Updated: python-twisted-core-12.2.0-5.el7.x86_64
May 20 09:38:33 Updated: python-twisted-web-12.1.0-7.el7_8.x86_64
May 20 09:38:33 Updated: rubygem-rake-0.9.6-36.el7.noarch
May 26 07:34:43 Updated: foreman-debug-1.24.3-1.el7.noarch
May 26 07:35:21 Updated: foreman-selinux-1.24.3-1.el7.noarch
May 26 07:35:24 Updated: 1:foreman-installer-1.24.3-1.el7.noarch
May 26 07:35:24 Updated: 1:rubygem-foreman_maintain-0.5.4-1.el7.noarch
May 26 07:35:25 Updated: tfm-rubygem-secure_headers-6.3.0-1.el7.noarch
May 26 07:35:48 Updated: foreman-1.24.3-1.el7.noarch
May 26 07:35:48 Updated: foreman-postgresql-1.24.3-1.el7.noarch
May 26 07:35:48 Updated: foreman-vmware-1.24.3-1.el7.noarch
May 26 07:35:49 Updated: 1:foreman-installer-katello-1.24.3-1.el7.noarch
May 26 07:35:50 Updated: foreman-proxy-1.24.3-1.el7.noarch
May 26 07:35:51 Updated: python3-pip-9.0.3-7.el7_8.noarch
May 26 07:35:51 Updated: foreman-cli-1.24.3-1.el7.noarch
May 26 07:35:51 Updated: tfm-rubygem-parse-cron-0.1.4-4.fm1_24.el7.noarch
May 26 07:35:51 Updated: foreman-release-1.24.3-1.el7.noarch
May 28 09:54:52 Installed: 1:tcl-8.5.13-8.el7.x86_64
May 28 09:54:53 Installed: expect-5.45-14.el7_1.x86_64
Jun 01 10:58:08 Updated: perl-Git-1.8.3.1-23.el7_8.noarch
Jun 01 10:58:10 Updated: git-1.8.3.1-23.el7_8.x86_64
Jun 01 10:58:32 Updated: git-1.8.3.1-23.el7_8.x86_64
Jun 01 10:58:32 Updated: perl-Git-1.8.3.1-23.el7_8.noarch
Jun 02 07:06:11 Updated: libuuid-2.23.2-63.0.1.el7.x86_64
Jun 02 07:06:11 Updated: libblkid-2.23.2-63.0.1.el7.x86_64
Jun 02 07:06:11 Updated: libmount-2.23.2-63.0.1.el7.x86_64
Jun 02 07:06:17 Updated: 1:docker-ce-cli-19.03.10-3.el7.x86_64
Jun 02 07:06:18 Updated: libsmartcols-2.23.2-63.0.1.el7.x86_64
Jun 02 07:06:18 Updated: util-linux-2.23.2-63.0.1.el7.x86_64
Jun 02 07:06:19 Updated: dracut-033-568.0.3.el7.x86_64
Jun 02 07:06:19 Updated: dracut-config-rescue-033-568.0.3.el7.x86_64
Jun 02 07:06:19 Updated: dracut-network-033-568.0.3.el7.x86_64
Jun 02 07:06:29 Installed: kernel-3.10.0-1127.8.2.0.1.el7.x86_64
Jun 02 07:06:33 Updated: 3:docker-ce-19.03.10-3.el7.x86_64
Jun 02 07:06:33 Updated: libuuid-devel-2.23.2-63.0.1.el7.x86_64
Jun 02 07:06:54 Updated: ansible-2.9.9-1.el7.noarch
Jun 02 07:07:06 Updated: chef-16.1.16-1.el7.x86_64
Jun 02 07:07:12 Updated: pmm2-client-2.6.1-6.el7.x86_64
Jun 02 07:07:12 Updated: python36-PyYAML-3.13-1.el7.x86_64
Jun 02 07:07:14 Updated: kernel-headers-3.10.0-1127.8.2.0.1.el7.x86_64
Jun 02 07:07:14 Updated: python36-rpm-4.11.3-8.el7.x86_64
Jun 02 07:07:15 Updated: python-perf-3.10.0-1127.8.2.0.1.el7.x86_64
Jun 02 07:14:58 Erased: kernel-3.10.0-1127.0.0.0.1.el7.x86_64

Additionally, the text below shows that a subscribed client does have access to the packages associated with the errata. The bind and git packages shown are associated with CESA-2020-2344 and CESA-2020-2337, respectively.

[root@s3-monitor ~]$ yum check-update
Loaded plugins: enabled_repos_upload, fastestmirror, package_upload, product-id, search-disabled-repos, subscription-manager, tracer_upload
Loading mirror speeds from cached hostfile
sdsc-hci_CentOS_7_CentOS_7                                                                                                                              | 2.1 kB  00:00:00
sdsc-hci_CentOS_7_CentOS_7_CR                                                                                                                           | 2.1 kB  00:00:00
sdsc-hci_CentOS_7_CentOS_7_Extras                                                                                                                       | 2.1 kB  00:00:00
sdsc-hci_CentOS_7_CentOS_7_Plus                                                                                                                         | 2.1 kB  00:00:00
sdsc-hci_CentOS_7_CentOS_7_Updates                                                                                                                      | 2.1 kB  00:00:00
sdsc-hci_EL7_Chef_EL7_Chef                                                                                                                              | 1.8 kB  00:00:00
sdsc-hci_EL7_EPEL_EL7_EPEL                                                                                                                              | 2.4 kB  00:00:00
sdsc-hci_EL7_Foreman_1_24_Client_EL7_Foreman_1_24_Client                                                                                                | 2.1 kB  00:00:00
sdsc-hci_EL7_Nagios_XI_EL7_Nagios_XI                                                                                                                    | 2.1 kB  00:00:00
sdsc-hci_EL7_Nagios_XI_EL7_Nagios_XI_Dependencies                                                                                                       | 2.5 kB  00:00:00
sdsc-hci_EL7_NessusAgent_EL7_NessusAgent                                                                                                                | 2.1 kB  00:00:00
sdsc-hci_EL7_Puppet_6_EL7_Puppet_6                                                                                                                      | 1.8 kB  00:00:00
sdsc-hci_EL7_Splunkforwarder_EL7_Splunkforwarder                                                                                                        | 2.1 kB  00:00:00
sdsc-hci_ELx_SentinelOne_Installer_ELx_SentinelOne_Installer                                                                                            | 2.1 kB  00:00:00

bind-export-libs.x86_64                                               32:9.11.4-16.P2.el7_8.6                                                sdsc-hci_CentOS_7_CentOS_7_Updates
bind-libs.x86_64                                                      32:9.11.4-16.P2.el7_8.6                                                sdsc-hci_CentOS_7_CentOS_7_Updates
bind-libs-lite.x86_64                                                 32:9.11.4-16.P2.el7_8.6                                                sdsc-hci_CentOS_7_CentOS_7_Updates
bind-license.noarch                                                   32:9.11.4-16.P2.el7_8.6                                                sdsc-hci_CentOS_7_CentOS_7_Updates
bind-utils.x86_64                                                     32:9.11.4-16.P2.el7_8.6                                                sdsc-hci_CentOS_7_CentOS_7_Updates
chef.x86_64                                                           16.1.16-1.el7                                                          sdsc-hci_EL7_Chef_EL7_Chef
git.x86_64                                                            1.8.3.1-23.el7_8                                                       sdsc-hci_CentOS_7_CentOS_7_Updates
perl-Git.noarch                                                       1.8.3.1-23.el7_8                                                       sdsc-hci_CentOS_7_CentOS_7_Updates
Uploading Enabled Repositories Report
Loaded plugins: fastestmirror, product-id, subscription-manager

Your problems sounds kind of like mine https://community.theforeman.org/t/katello-3-15-doesnt-show-available-package-updates-anymore

I have not imported any errata but I don’t see any applicables for CentOS 7 either. I am on Katello 3.15.1, though.

This does seem like a pulp problem. All errata are present and available to clients but UI does not show applicability. Several pulp packages were updated during the time period in question. Perhaps the updates for 3.14.x were faulted, too.

@iballou has provided a workaround to this problem in another thread.

Hi All,

The script “errata_import.pl” is no more working with newer versions of foreman and katello…I am getting skipping errata and no package found for everything. is there anybody knows any solution of it ?