Page 1 of 1
pymongo and updating it
Posted: Tue Oct 01, 2024 7:57 am
by kbauma01
We are getting a vulnerablity report on /usr/local/lib64/python3.6/site-packages/pymongo. The installed version is 4.1.1, the fixed version is 4.6.3. If I upgrade it, will that break anything Nagios XI related?
I'm guessing no (and yes, I will take a snapshot of it) but I just wanted to check.
RedHat 8.10, XI version 2024R1.2.1
Re: pymongo and updating it
Posted: Tue Oct 01, 2024 4:40 pm
by DoubleDoubleA
Hi @kbauma01,
That looks to be the python MongoDB library, which installs as part of the base Nagios XI install for MongoDB monitoring. If you are not monitoring MongoDB, updating that should not impact your monitoring. If you are monitoring MongoDB, it is an update of several minor versions, but in theory should not have any breaking changes.
Are you monitoring MongoDB?
Aaron
Re: pymongo and updating it
Posted: Wed Oct 02, 2024 5:28 am
by kbauma01
Nope, not monitoring MongoDB at all. I'll update it, see what happens, and report back!
Re: pymongo and updating it
Posted: Fri Oct 04, 2024 8:06 am
by kbauma01
I removed pymongo 4.1.1 and added 4.10.1.
pip list | grep pymongo
pip uninstall pymongo (that got rid of 4.1.1)
I had to make sure I was using python 3.9 to add 4.10.1
python3.9 -m pip install --upgrade pymongo
python3.9 -m pip list | grep pymongo
So far no issues, I consider that a win!