Skip to main content

[Imunify360]'s Yara Package Conflicting With [epel]'s, Breaks Yum Updates

Ehsan Dowlatshah
  • Updated

Explanation: 

 

Some Cloudlinux repositories ([Imunify360] & [cloudlinux-imunify360]) are hosting the alt-python35-yara package and this package needs the yara package as a dependency:

 
repoquery -R --resolve --recursive alt-python35-yara | grep -Ei yara

yara-0:3.5.0-5.el7.x86_64

 

The yara package is available in the above-mentioned repositories:

 

[yara] [3.5.0] [5.el7] [cloudlinux-imunify360]
 
[yara] [3.5.0] [5.el7] [imunify360]

 

The yara package is also available in the EPEL repository but the version is different:

 

[yara] [4.1.0] [1.el7] [epel]

 

 The issue with the EPEL's version is that it does not meet the dependency requirements of alt-python35-yara package from the Cloudlinux's repositories.

 

The error appears when both the Cloudlinux's and the EPEL repositories are enabled on the system and we attempt to run “yum update”.  This forces yum to search for the most recent version of the Yara package which is the one available in the EPEL repository but that version does not meet the dependency requirements of alt-python35-yara and yum updates fail, as a result, with the following error: 

--> Finished Dependency 
ResolutionError: Package: alt-python35-yara-3.5.0-10.el7.x86_64 (@cloudlinux-imunify360) 
Requires: libyara.so.3()(64bit) 
Removing: yara-3.5.0-5.el7.x86_64 (@cloudlinux-imunify360) 
libyara.so.3()(64bit)


Workaround

This is not a cPanel issue per se, nevertheless, we've opened an upstream case with the Cloudlinux team to investigate this further. For reference, the case number is UPS-365. For updates about this case, you need to contact Cloudlinux's support channels.

 

The alt-python35-yara package is outdated and could be removed from the server and that should resolve the issue.

 

yum remove yara

 

Nevertheless, if you wish to keep the package for whatever reason, then as a workaround, we can exclude only the yara package from the EPEL repository like this:

cat /etc/yum.repos.d/epel.repo | grep -Ei exclude -B 12

[epel]
name=Extra Packages for Enterprise Linux 7 - $basearch
#baseurl=http://download.fedoraproject.org/pub/epel/7/$basearch
metalink=https://mirrors.fedoraproject.org/metalink?repo=epel-7&arch=$basearch&infra=$infra&content=$contentdir
failovermethod=priority
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7
exclude=yara

 

Then attempt to rebuild Yum's cache with this: 

 

yum clean all && yum makecache

 

And finally yum updates should be able to run with no issue:

yum update

Loaded plugins: fastestmirror, priorities, rhnplugin, universal-hooks
This system is receiving updates from CLN.
Loading mirror speeds from cached hostfile
 * EA4: 185.53.12.144
 * cpanel-addons-production-feed: 185.53.12.144
 * cpanel-plugins: 185.53.12.144
 * cloudlinux-x86_64-server-7: de-proxy.cl-mirror.net
 * epel: mirror.speedpartner.de
No packages marked for update

 

 

 

Related articles