Loading...

XML

Word

Printable

JSON

Type: Task
Resolution: Fixed
Priority: Major - P3
Fix Version/s: 4.1.1
Affects Version/s: 3.4.13, 3.6.3
Component/s: JavaScript
Labels:
- security

Backwards Compatibility:
Major Change
Confidence Status:
None
Work Order:
3

Aha! Reference:
None
Tracking Level:
None
Risk Status:
None
Exec Notes:
None
Goal Name:
None
Goal Link:
None

In MongoDB 3.0 we deprecated the db.eval command (SERVER-17453).

This command has a number of bugs and security issues related to it, and given that it's now been deprecated for several releases, we should remove it in 4.0.

We will likely also need a DOC ticket associated with this, and potentially a CS ticket for our services.

depends on

DRIVERS-460 Deprecate eval helpers

Closed

SERVER-17478 Remove or modify copyTo() shell helper

Closed

is depended on by

SERVER-33648 Attempting to perform user- and role-management commands in db.eval() with nolock=false can lead to deadlock

Closed

is related to

SERVER-36719 Investigate optimizations for aggregate with single $out stage

Backlog

Assignee:: Sara Golemon (Inactive)

Reporter:: Matt Lord (Inactive)

Participants:: Matt Lord, Sara Golemon

Votes:: 0 Vote for this issue

Watchers:: 14 Start watching this issue

Created:: Mar 05 2018 04:01:29 PM UTC

Updated:: Oct 29 2023 10:34:09 PM UTC

Resolved:: Jun 30 2018 03:06:09 AM UTC