--- title: "Security update process common errors" date: "2024-02-14T06:18:38+00:00" summary: "Troubleshoot common security update errors in Remote Administration environments with solutions for Drupal and Composer issues." image: type: "page" url: "/acquia-cloud-platform/security-update-process-common-errors" id: "20c56601-90eb-426b-94ba-5e3feae6dd30" --- This page provides information about common errors encountered during Remote Administration (RA) environment security updates, along with possible solutions. If you encounter an error during the first step of the RA security update process, you must first review the provided error, suggested steps, and documentation for guidance. If solutions are provided, attempt to deploy the suggested fix to your production environment. After deploying the fix, wait for the next automated update attempt to see if the issue has been resolved. Ensuring all documentation steps are carefully followed typically resolves the encountered errors. If the problem persists, or if the security update is time-sensitive and you lack the necessary developer resources, consider enlisting a partner developer or engaging Acquia Professional Services to effectively address the issue. Timely resolutions are critical for maintaining site security. * **Error**: `Drush, All pending updates failed on RA for prod:siteName` * Default multisite may not be functional * Configure the default multisite with a working `settings.php` file with a correct database include statement. See [Configuring your application to use environment databases](/acquia-cloud-platform/manage-apps/database#cloud-use-env-dbs). * Point requests for default at a working multisite in the `sites.php` file. See [Using sites.php to specify an alternate settings.php file](/acquia-cloud-platform/help/93781-using-sitesphp-specify-alternate-settingsphp-file "Using sites.php to specify an alternate settings.php file"). * Drush may not be configured to work on the RA environment. * Check any environment specific case statements or code accounts for the RA environment. * **Error**: `Unable to run drush #.#.# pm-updatestatus/pm:security on any Production multisite for prod:siteName, exiting.` * Default multisite not working * Configure the default multisite with a working `settings.php` file with a correct database include statement. See [Configuring your application to use environment databases](/acquia-cloud-platform/manage-apps/database#cloud-use-env-dbs). * Point requests for default at a working multisite in the `sites.php` file, using `sites.php` to specify an alternate `settings.php` file. * Drush symlink is missing from `vendor/bin` - Ensure `vendor/bin/drush` is committed to a branch and deployed. * An alternate `.drushrc` file was detected. - Remove it from the codebase and add it to your `.gitignore` file. * See [Known issues with Drush](/acquia-cloud-platform/known-issues#cloud-known-issues-drush) for Drush specific solutions. * The website runs the [current Drupal version](/service-offerings/guide/software-life-cycle#supported-drupal-version), but is not Composer-based. * Convert to a Composer-based website: [Acquia Automation: Composer builds](/acquia-cms/ra/automation/composer). * **Error**: `Error performing task 16811 : StageDeploy with error message Staging failed because at least one site failed to stage during the process.` * A previously staged website is no longer valid. * Give the RA team with a list of 5 to 10 domains for websites which should be staged in the RA environments. * **Error**: `Unable to run drush As this is a Drupal multi-site build, and you haven't specified a [status] pm-updatestatus/pm:security on any Production multisite for prod:siteName, exiting.` * This error is related to the [Domain Access](https://www.drupal.org/project/domain) module. * Give the RA team a list of 5 to 10 domains for websites to include in the update process. * Add domain aliases to your primary domain configuration on production that includes all non-production domains. * **Error**: `Unable to run drush [warning] "continue" targeting switch is equivalent to "break". Did you mean to use "continue"? file.module:898 pm-updatestatus/pm:security on any Production multisite for  prod:siteName, exiting.` * This error indicates an outdated Drupal core running on PHP 7.3. * Update Drupal core. Troubleshooting for failed updates on Composer-based websites ------------------------------------------------------------- If you encounter an error during the RA automated update process, particularly with security updates for the current Drupal version, you might need to validate that that your site's Composer configuration is correct. For validation, you must ensure that: * A composer.json file with your required modules is in place above the docroot, * A composer.lock file is in place above the docroot, * The `/vendor` directory is in place above the docroot, and * The `docroot/autoload.php` file references the location of the vendor directory. View the Composer log file attached to the ticket, search for the first occurrence of **Error Output** to find details of what caused the automated update process to fail. Acquia recommends that your development team fixes the root cause of the error and closes the associated ticket. This ensures that the automated process for security updates can attempt to update the website in the next weekly run. The following table documents the probable root causes for different error messages that you may encounter in the Composer log file, and serves as a starting point for fixing the errors. **Error messages in log file** **Probable root cause of the error** `Your requirements could not be resolved to an installable set of packages.` `Only root package requirements can receive temporary constraints` `composer-drupal-optimizations is not required in your composer.json and has not been removed` `Only root package requirements can receive temporary constraints` `Your composer.json file is invalid` Composer had issues with the require section versioning. `should be avoided if the package follows semantic versioning` `core : exact version constraints` A dependency pinned to a specific version in the `composer.json` file prevented updates from getting completed. `These conflict with your requirements or minimum-stability` `The following exception is caused by a lack of memory or swap, or not having swap configured` A Composer-dependency conflict prevented updates from getting completed. `Uncaught Error: Call to undefined` `Fatal error: Cannot redeclare` `Fatal error: Declaration of` `Fatal error: Uncaught ArgumentCountError` `fatal: Could not read from remote repository` `Composer configuration is not valid` `Failed to execute git clone` `option does not exist` `Fatal error: require()` `proc_open(): fork failed - Cannot allocate memory` `failed to open stream: No such file or directory` `Fatal error: Uncaught Error` The system encountered a PHP error while attempting to perform updates. `The process has been signaled with signal` `Allowed memory size of` The system attempted Composer updates with Composer 1.x, and PHP ran out of memory. `Unable to remove deprecated Composer package` `composer-drupal-optimizations is not required in your composer.json and has not been removed` The update process attempted to remove a deprecated package but failed. `plugin was skipped because it requires a Plugin API version` Composer updates could not be applied because of a dependency in the site that required Composer 2.x. Other dependencies were only compatible with Composer 1.x. `Failed to execute git clone` `Unable to checkout git branch` A private Git repository specified in the `composer.json` file prevented Composer updates from getting completed. `.git directory is missing` During the Composer update process, the system prompted the user to reinstall a copy of a dependency due to a missing .git directory. The automated update process could not respond `yes` to the prompt, and exited. * Remove the particular package from the vendor directory as mentioned in the composer\_error log file attached with the ticket. * Be careful while removing the package directory as some packages such as `simplesamlphp/simplesamlphp` may write to the vendor directory, and your changes may be lost. For more information, refer to the package documentation. * Run [composer install](https://getcomposer.org/doc/03-cli.md#install) on root to regenerate this package directory. `Cannot apply patch` Composer attempted to apply patches as specified in the `composer.json` file but failed.