Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-22144

It seems somebody is tampering with the MongoDB 3.2 Debian repository

    XMLWordPrintableJSON

Details

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: Critical - P2 Critical - P2
    • None
    • 3.2.0
    • Packaging
    • None
    • ALL
    • Hide

      apt-key adv --keyserver hkp://keyserver.ubuntu.com --recv EA312927
      echo 'deb http://repo.mongodb.org/apt/debian wheezy/mongodb-org/3.2 main' > /etc/apt/sources.list.d/mongodb-org.list
      apt-get update

      Show
      apt-key adv --keyserver hkp://keyserver.ubuntu.com --recv EA312927 echo 'deb http://repo.mongodb.org/apt/debian wheezy/mongodb-org/3.2 main' > /etc/apt/sources.list.d/mongodb-org.list apt-get update

    Description

      The 3.2 binaries in the Debian repository do not match the key specified in the installation guide.
      Might be a malicious attack.

      Attachments

        Activity

          People

            Unassigned Unassigned
            scsynergy Ronald Feicht
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: