Security issue with use of mock

newbie14 · 07-27-2013, 09:48 AM

Dear All,
I am trying to install ossec on a centos 6.4 machine but only repo which have .rpm file are from atomicrepo but then installing it require to upgrade my mysql I am reluctant to do it so I have used mock to rebuild and manage to yum install later from the build folder. My concern is that any security issue with regards to this issue or any other known issue and also how much extra space will this take?

David Trest · 07-28-2013, 06:53 PM

I see an issue with using software that's designed to have requirements of a higher MySQL build than you're using.

There's no harm in upgrading MySQL. Really, with the CentOS repo, they're using a very old version of MySQL. Most repos now have switched to MariaDB and when you attempt to upgrade MySQL it will switch to that package (as MySQL has been obsoleted) and tell you as such in the yum screen.

If the RPM says it requires a version of the software >than what you have installed, upgrade.

newbie14 · 07-28-2013, 09:25 PM

Dear David,
How about a system which is running kind of risky there? How about leaving and just rebuild what impact can it have that way around without the upgrades?

David Trest · 07-28-2013, 09:38 PM

Simply put?

It may not work.

It may work at first but bugs may start happening.

If this is on a production system, it could impact performance and destroy any support from the vendor.

Contact the builder of the RPM and see why they chose that particular version of MySQL. Probably because the software requires it.

Suck it up and upgrade.

newbie14 · 07-28-2013, 09:59 PM

Dear David,
So far I have tested it works no issue though after rebuilding.