During the installation of a linux update package, a missing dependency causes an error. The Symantec Patch Management Solution uses YUM for client side dependency resolution and in some cases YUM does not detect second level dependencies successfully.
INFO 2018-12-27 03:49:03.624 123273 139816515225344 SWUAgent-LibSmfRepo > Call subprocess. /opt/altiris/notification/swuagent/lib/exec/aex-smf-tsresolver-yum -c /opt/altiris/notification/swuagent/var/repo/smf-yum-repository.conf -i nss-sysinit-3.36.0-9.el6_10.x86_64 nss-tools-3.36.0-9.el6_10.x86_64 nss-3.36.0-9.el6_10.x86_64
ERRO 2018-12-27 03:49:04.859 123273 139816515225344 SWUAgent-SWUJobImpl > Failed to process Yum transaction. Traceback (most recent call last):
File "/opt/altiris/notification/swuagent/lib/exec/aex-smf-tsresolver-yum", line 122, in <module>
smf.install(args, options.test)
File "/opt/altiris/notification/swuagent/lib/exec/aex-smf-tsresolver-yum", line 80, in install
self.yb.processTransaction()
File "/usr/lib/python2.6/site-packages/yum/__init__.py", line 5086, in processTransaction
self._doTestTransaction(callback,display=rpmTestDisplay)
File "/usr/lib/python2.6/site-packages/yum/__init__.py", line 5160, in _doTestTransaction
raise Errors.YumRPMCheckError,retmsgs
yum.Errors.YumRPMCheckError: [u'ERROR with rpm_check_debug vs depsolve:', 'libnssutil3.so(NSSUTIL_3.31)(64bit) is needed by nss-3.36.0-9.el6_10.x86_64', 'libnssutil3.so(NSSUTIL_3.33)(64bit) is needed by nss-3.36.0-9.el6_10.x86_64', 'nspr >= 4.19.0 is needed by nss-3.36.0-9.el6_10.x86_64', 'nss-util >= 3.36.0 is needed by nss-3.36.0-9.el6_10.x86_64', u'Please report this error at https://bugzilla.redhat.com/enter_bug.cgi?product=Red%20Hat%20Enterprise%20Linux%206&component=yum']
INFO 2018-12-27 03:49:04.885 123273 139816515225344 SWUExecutionSequencer > Patch execution cycle completed
INFO 2018-12-27 03:49:04.885 123273 139816515225344 SWUAgent-VulnerabilityTaskCatalogDownloadInitiator > Patch cycle completion signal received
ITMS 8.1 and 8.5
Likely a YUM issue and can occur in rare cases when the Linux OS has not been updates for many years.
The fastest resolution is to add the missing (second level) dependency package to the software update policy for installation together with the updates.