I am getting the following error when trying to run updates through the updates module and CLI. I am not sure how to get the updates to work. I don’t want to break anything by trying to remove or reboot prematurely if I can help it 
Loaded plugins: fastestmirror, versionlock
Loading mirror speeds from cached hostfile
Resolving Dependencies
--> Running transaction check
---> Package openssl.x86_64 1:1.0.2k-12.el7 will be updated
---> Package openssl.x86_64 1:1.0.2k-13.el7 will be an update
---> Package openssl-devel.x86_64 1:1.0.2k-12.el7 will be updated
---> Package openssl-devel.x86_64 1:1.0.2k-13.el7 will be an update
---> Package openssl-libs.x86_64 1:1.0.2k-12.el7 will be updated
---> Package openssl-libs.x86_64 1:1.0.2k-13.el7 will be an update
---> Package python-zmq.x86_64 0:15.3.0-2.el7 will be updated
---> Package python-zmq.x86_64 0:15.3.0-3.el7 will be an update
---> Package salt.noarch 0:2018.3.2-1.el7 will be updated
---> Package salt.noarch 0:2018.3.3-1.el7 will be an update
---> Package salt-minion.noarch 0:2018.3.2-1.el7 will be updated
---> Package salt-minion.noarch 0:2018.3.3-1.el7 will be an update
--> Finished Dependency Resolution
Error: Multilib version problems found. This often means that the root
cause is something else and multilib version checking is just
pointing out that there is a problem. Eg.:
1. You have an upgrade for openssl-libs which is missing some
dependency that another package requires. Yum is trying to
solve this by installing an older version of openssl-libs of the
different architecture. If you exclude the bad architecture
yum will tell you what the root cause is (which package
requires what). You can try redoing the upgrade with
--exclude openssl-libs.otherarch ... this should give you an error
message showing the root cause of the problem.
2. You have multiple architectures of openssl-libs installed, but
yum can only see an upgrade for one of those architectures.
If you don't want/need both architectures anymore then you
can remove the one with the missing update and everything
will work.
3. You have duplicate versions of openssl-libs installed already.
You can use "yum check" to get yum show these errors.
...you can also use --setopt=protected_multilib=false to remove
this checking, however this is almost never the correct thing to
do as something else is very likely to go wrong (often causing
much more problems).
Protected multilib versions: 1:openssl-libs-1.0.2k-13.el7.x86_64 != 1:openssl-libs-1.0.2k-12.el7.i686