Timeline on the new release of mongo-tools

XMLWordPrintableJSON

    • Type: Bug
    • Resolution: Done
    • Priority: Medium
    • None
    • Affects Version/s: None
    • Component/s: All Tools
    • Tools and Replicator
    • 2

      Problem Statement/Rationale

      Current version of mongo-tools is vulnerable to many Critical and High CVEs.

      Almost all of these CVEs are dependent on golang version.

      I see that a PR was merged yesterday that did the version bump: https://github.com/mongodb/mongo-tools/pull/1006

       

      Can someone please communicate a release date for mongo-tools with this fix? 
      We and our customers are exposed to these critical CVEs because of this and it would helpful if we have a date by which the version will be released

      Steps to Reproduce

      How could an engineer replicate the issue you’re reporting?

      Expected Results

      What do you expect to happen?

      Actual Results

      What do you observe is happening?

      Additional Notes

      Any additional information that may be useful to include.

            Assignee:
            Dave Rolsky
            Reporter:
            Rohit Nawale (EXT)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: