sorry for double posting ...

the new OpenSSL vulnerability

as some of you know that there is a new vulnerability in OpenSSL that requires all of us to upgrade as soon as possible ..

my question is .. is it only downloading the rpm and rpm-ivh filename.rpm ?? or do we have to worry about some other things?
did the following:

[root@plesk up2date]# up2date openssl

Retrieving list of all available packages...
########################################
########################################

Removing installed packages from list of updates...
########################################

Removing packages with files not specified from list...

Removing packages marked to skip from list...
########################################

Getting headers for available packages...
########################################

Removing packages with files marked to skip from list...
########################################

Testing package set / solving RPM inter-dependencies...
########################################
The following packages were added to your selection to satify dependencies:

Name Version Release
--------------------------------------------------------------
openssl 0.9.6b 32.7
openssl-devel 0.9.6b 32.7

Retrieving selected packages...
openssl-0.9.6b-32.7.i686.rp ########################## Done.
########################## Done.
openssl-devel-0.9.6b-32.7.i ########################## Done.
[root@plesk up2date]# ls
openssl-0.9.6b-32.7.i686.hdr openssl-devel-0.9.6b-32.7.i386.rpm
openssl-0.9.6b-32.7.i686.rpm redhat-linux-i386-7.2.20030429145826
openssl-devel-0.9.6b-32.7.i386.hdr
[root@plesk up2date]# rpm -Uvh openssl-0.9.6b-32.7.i686.
openssl-0.9.6b-32.7.i686.hdr openssl-0.9.6b-32.7.i686.rpm
[root@plesk up2date]# rpm -Uvh openssl-0.9.6b-32.7.i686.rpm
error: failed dependencies:
openssl = 0.9.6b-8 is needed by openssl-devel-0.9.6b-8
[root@plesk up2date]#




now why did it fail???

Have you solved this?

ohh yes i did ..

i added the --nodeps to the command and it worked:)

but i really want to know what would --nodeps exactly do ..
thanks

--nodeps ignores any dependency problems.

yes i know that ..

but what is the difference between upgrading a package with and without using this parameter? i know that it will ignore the problems .. but what could cause by ignoring them?

thanks