RSA NetWitness system failed to complete upgrade to 10.6.2.1 - issues with expat package

[#1]

Article Number

000034751

Applies To

RSA Product Set: Security Analytics
RSA Product/Service Type: Core Appliance, Event Stream Analysis (ESA), Malware Analysis, Warehouse, Archiver, IPDB Extractor, Security Analytics Server
RSA Version/Condition: 10.6.2.1
Platform: CentOS
O/S Version: EL6

Issue

1. Populate the 10.6.2.1 package (multi-zip) into the 10.6.2 NW server repository through the GUI.
2. Tried to upgrade the a system, it then failed the upgrade due to issue upgrade the expat packages


Image description

The errors are:
expat.x86_64
:"Execution of '/usr/bin/yum -d 0 -e 0 -y update expat' returned 1: Error: Package: expat-devel-2.0.1-11.el6_2x86_64...

expat.i686
:"Execution of '/usr/bin/yum -d 0 -e 0 -y update expat' returned 1: Error: Package: expat-devel-2.0.1-11.el6_2x86_64...

3. Tried to reboot the system and apply the upgrade again, it still failed with the same error

Cause

There were conflict in updating some dependency packages in the system that are longer needed by SA, namely expat-devel-2.0.1-11.el6_2.x86_64 and gdb-7.5.1-22.el6.x86_64. These are no longer needed by the SA system and can be removed. After that, you can proceed to do the upgrade again. 

Resolution

To mitigate the issue:
1. Login to the problem sytem through SSH and run the following command to remove gdb package
rpm -e gdb-7.5.1-22.el6.x86_64

2. Then remove the expat-devel package
rpm -e expat-devel-2.0.1-11.el6_2.x86_64

3. Proceed to do the update through the GUI and reboot the system accordingly.