Bug 1324937

Summary:	Upgrade to mongo 2.6 - RHEL7 ONLY
Product:	Red Hat Satellite	Reporter:	Mike McCune <mmccune>
Component:	Pulp	Assignee:	Mike McCune <mmccune>
Status:	CLOSED ERRATA	QA Contact:	Sachin Ghai <sghai>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	6.2.0	CC:	bbuckingham, bkearney, cwelton, ehelms, jpriddy, mmccune, mrichter, sghai
Target Milestone:	Unspecified	Keywords:	Triaged
Target Release:	Unused	Flags:	mrichter: needinfo? (mmccune)
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-07-27 11:25:41 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Mike McCune 2016-04-07 15:57:07 UTC

Current upstream Pulp and Katello uses Mongo 2.6.11 which has numerous stability, security and performance improvements over 2.4. There is a specific vulnerability here:

https://bugzilla.redhat.com/show_bug.cgi?id=1200446

that we also would like to get with a move to 2.6.11 or later.

Anything we can do to improve the performance Pulp in Satellite 6.2 should be done and there are significant improvements to be had 

A related RFE for a move to 3.0 is here but can be done at a later date:

https://bugzilla.redhat.com/show_bug.cgi?id=1295741

Comment 3 Mike McCune 2016-05-03 15:16:15 UTC

 latest-pkg-62 mongodb
Build                                     Tag                   Built by
----------------------------------------  --------------------  ----------------
mongodb-2.6.11-1.el7sat                   satellite-6.2.0-rhel-7-candidate  mmccune
Build                                     Tag                   Built by
----------------------------------------  --------------------  ----------------
mongodb-2.4.6-2.el6sat                    satellite-6.1.0-rhel-6  jmontleo

Comment 5 Sachin Ghai 2016-05-09 08:48:12 UTC

Verified with sat6.2 GA snap 10.1

I don't see "mongodb-2.6.11-1.el7sat" installed with 6.2 snap10. Snap10 installed with:

 ~]# rpm -qa | grep mongodb
mongodb-2.4.9-3.el7sat.x86_64
mongodb-server-2.4.9-3.el7sat.x86_64

Also, I didn't find 2.6.11 version of mongodb under snap10 repo URL.

Comment 6 Bryan Kearney 2016-05-16 16:37:13 UTC

Delivered with Snap 11

mongodb-2.6.11-2.el7sat.x86_64.rpm
mongodb-server-2.6.11-2.el7sat.x86_64.rpm

See http://sat-r220-02.lab.eng.rdu2.redhat.com/pulp/repos/Sat6-CI/QA/Satellite_RHEL7/custom/Red_Hat_Satellite_6_2_Composes/RHEL7_Satellite_x86_64_os/

Comment 7 Bryan Kearney 2016-07-27 11:25:41 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2016:1501