<!-- 
RSS generated by JIRA (9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66) at Thu Feb 08 04:02:38 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>MongoDB Jira</title>
    <link>https://jira.mongodb.org</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.7.1</version>
        <build-number>970001</build-number>
        <build-date>13-04-2023</build-date>
    </build-info>


<item>
            <title>[SERVER-23187] Symantec blocks installation of MSI files for MongoDB</title>
                <link>https://jira.mongodb.org/browse/SERVER-23187</link>
                <project id="10000" key="SERVER">Core Server</project>
                    <description>&lt;p&gt;As part of the MOOC (M101P/2016_March), there is the need to download software.&lt;br/&gt;
The download works fine ; however, Symantec blocks &amp;amp; quarantines files (see versions below), marking them as &apos;malware&apos; due to &apos;low reputation&apos;&lt;br/&gt;
Yes, Symantec has problems detecting &apos;false positives&apos; ... however, It would be in the best interest of everybody to have you contact them ... every time you release MSI files ... in this way ... your files will be &apos;marked&apos; as (really) good files.&lt;br/&gt;
FYI, with a few of my peers, we are doing the MOOC in the office. Locally, it is  not possible to modify the settings of anti-virus ... as the training is not official &lt;/p&gt;</description>
                <environment></environment>
        <key id="273081">SERVER-23187</key>
            <summary>Symantec blocks installation of MSI files for MongoDB</summary>
                <type id="1" iconUrl="https://jira.mongodb.org/secure/viewavatar?size=xsmall&amp;avatarId=14703&amp;avatarType=issuetype">Bug</type>
                                            <priority id="4" iconUrl="https://jira.mongodb.org/images/icons/priorities/minor.svg">Minor - P4</priority>
                        <status id="6" iconUrl="https://jira.mongodb.org/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="2">Won&apos;t Fix</resolution>
                                        <assignee username="alex.neben@mongodb.com">Alex Neben</assignee>
                                    <reporter username="silmarils">Alfonso Marin</reporter>
                        <labels>
                    </labels>
                <created>Wed, 16 Mar 2016 19:52:06 +0000</created>
                <updated>Wed, 1 Jun 2022 15:56:00 +0000</updated>
                            <resolved>Wed, 1 Jun 2022 15:55:42 +0000</resolved>
                                                                    <component>Packaging</component>
                    <component>Usability</component>
                                        <votes>0</votes>
                                    <watches>10</watches>
                                                                                                                <comments>
                            <comment id="1409452" author="ramon.fernandez" created="Sat, 15 Oct 2016 13:01:37 +0000"  >&lt;p&gt;Thanks for posting your findings and suggestions on the ticket &lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=emaj4mongo&quot; class=&quot;user-hover&quot; rel=&quot;emaj4mongo&quot;&gt;emaj4mongo&lt;/a&gt;, and thanks for coming to the Bug Hunt MUG!&lt;/p&gt;</comment>
                            <comment id="1379511" author="emaj4mongo" created="Thu, 8 Sep 2016 14:24:54 +0000"  >&lt;p&gt;I have reproduced this issue during MongoDB Bug Hunt.  Typically it has occurred when an unsigned executable has been downloaded from an location deemed &quot;untrustworthy&quot; by Symantec or my IT admins.  I worked around this protection by fooling my computer into thinking I created the msi file.  I did this by quickly renaming the extension, copying that file to another folder, and then renaming the extension back to &quot;msi&quot;.&lt;/p&gt;

&lt;p&gt;I haven&apos;t had this problem with production build installers.  Maybe the issue is in how the dev build exe is signed.  Looking into one of the whitelisting forum entries from Symantec... &lt;a href=&quot;http://www.symantec.com/connect/forums/how-whitelist-false-positive-sepm&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;http://www.symantec.com/connect/forums/how-whitelist-false-positive-sepm&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;...&lt;br/&gt;
there are 3 other things you could also do-&lt;br/&gt;
...&lt;br/&gt;
2) Sign your files with Class-3 digital certificates (X.509) from a Certificate Authority if you need to publish softwares/files.&lt;br/&gt;
...&lt;/p&gt;</comment>
                            <comment id="1208471" author="thomas.schubert" created="Fri, 18 Mar 2016 21:07:30 +0000"  >&lt;p&gt;Hi &lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=silmarils&quot; class=&quot;user-hover&quot; rel=&quot;silmarils&quot;&gt;silmarils&lt;/a&gt;,&lt;/p&gt;

&lt;p&gt;Thank you for reporting this issue, and thank you for reaching out to Symantec to whitelist the files you mentioned. We will investigate how to best get all of our MSI&apos;s whitelisted across versions, branches, and release types, as well as how to add this to our release process going forward.&lt;/p&gt;

&lt;p&gt;Kind regards,&lt;br/&gt;
Thomas&lt;/p&gt;</comment>
                            <comment id="1206467" author="silmarils" created="Thu, 17 Mar 2016 11:07:20 +0000"  >&lt;p&gt;Symantec has just &apos;whitelisted&apos; the other file (newer version)&lt;/p&gt;

&lt;p&gt;Their log:&lt;/p&gt;

&lt;p&gt;Upon further analysis and investigation we have verified your submission and, as such, the detection(s) for the following file(s) will be removed from our products:&lt;/p&gt;

&lt;p&gt;	Filename: mongodb-win32-x86_64-3.2.4-signed.msi&lt;br/&gt;
	MD5: 6ED3154C1E8B725528A8AB04ACC3C196&lt;br/&gt;
	SHA256: A4FAFBA94DFA41BAC8AF52B3C86A05CFC1AF96FA8D9DB85532A310B3CAABDB31&lt;br/&gt;
	Result: 	Whitelisting for above file is taking effect from now on.&lt;/p&gt;</comment>
                            <comment id="1206258" author="silmarils" created="Thu, 17 Mar 2016 02:02:15 +0000"  >&lt;p&gt;I did a little bit of research, and reached out to symantec support (very supportive).&lt;/p&gt;

&lt;p&gt;First, upon request, Symantec &apos;whitelisted&apos; one of the files (the one suggested in the MOOC) ; feedback enclosed.. &lt;/p&gt;

&lt;p&gt;Second ... I did submit another request for the current version.&lt;/p&gt;

&lt;p&gt;Thirst ... there is a link for software vendors to request Symantec to &apos;whitelist&apos; files IN ADVANCE ; from Symantec support: &quot;If you are a software vendor and would like to upload your software for proactive whitelisting, please complete the following form: &lt;a href=&quot;https://submit.symantec.com/whitelist/&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://submit.symantec.com/whitelist/&lt;/a&gt;   &quot;&lt;/p&gt;

&lt;p&gt;So ... time to wait for the whitelists to be refreshed ... &lt;/p&gt;

&lt;p&gt;AM&lt;/p&gt;

&lt;p&gt;PS: &lt;/p&gt;

&lt;p&gt;&lt;span class=&quot;error&quot;&gt;&amp;#91;Begin Symantec feedback&amp;#93;&lt;/span&gt;&lt;br/&gt;
Upon further analysis and investigation we have verified your submission and, as such, the detection(s) for the following file(s) will be removed from our products:&lt;/p&gt;

&lt;p&gt;	Filename: mongodb-win32-x86_64-3.0.10-signed.msi&lt;br/&gt;
	MD5: E8218AACA6B435BED54D2019ACD50EDB&lt;br/&gt;
	SHA256: B45B44BAF539E120B7B522AB9FEBA532E426296691DC77ADADF4DFFFD3EB86FB&lt;br/&gt;
	Result: 	Whitelisting for above file is taking effect from now on.&lt;/p&gt;

&lt;p&gt;&lt;span class=&quot;error&quot;&gt;&amp;#91;End Symantec feedback&amp;#93;&lt;/span&gt;&lt;/p&gt;</comment>
                    </comments>
                    <attachments>
                            <attachment id="113821" name="2016-03-16 - MongoDB blocked by Symantec.pdf" size="126401" author="silmarils" created="Wed, 16 Mar 2016 19:52:06 +0000"/>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                <customfield id="customfield_10050" key="com.atlassian.jira.toolkit:comments">
                        <customfieldname># Replies</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>5.0</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_10055" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>Date of 1st Reply</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Wed, 16 Mar 2016 21:20:06 +0000</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10052" key="com.atlassian.jira.toolkit:dayslastcommented">
                        <customfieldname>Days since reply</customfieldname>
                        <customfieldvalues>
                                        7 years, 17 weeks, 4 days ago
    
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_18254" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Dependencies</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue><![CDATA[]]></customfieldvalue>


                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_15850" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10057" key="com.atlassian.jira.toolkit:lastusercommented">
                        <customfieldname>Last comment by Customer</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>true</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10056" key="com.atlassian.jira.toolkit:lastupdaterorcommenter">
                        <customfieldname>Last commenter</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>alex.neben@mongodb.com</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_11151" key="com.atlassian.jira.toolkit:LastCommentDate">
                        <customfieldname>Last public comment date</customfieldname>
                        <customfieldvalues>
                            7 years, 17 weeks, 4 days ago
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                <customfield id="customfield_10051" key="com.atlassian.jira.toolkit:participants">
                        <customfieldname>Participants</customfieldname>
                        <customfieldvalues>
                                        <customfieldvalue>alex.neben@mongodb.com</customfieldvalue>
            <customfieldvalue>silmarils</customfieldvalue>
            <customfieldvalue>emaj4mongo</customfieldvalue>
            <customfieldvalue>kelsey.schubert@mongodb.com</customfieldvalue>
            <customfieldvalue>ramon.fernandez@mongodb.com</customfieldvalue>
    
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                        <customfield id="customfield_14254" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Product Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|hrkdef:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_12550" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2|hr1vnj:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10558" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>9223372036854775807</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10053" key="com.atlassian.jira.ext.charting:timeinstatus">
                        <customfieldname>Time In Status</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_22870" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Triagers</customfieldname>
                        <customfieldvalues>
                                

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_14350" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>serverRank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|hrlc2f:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                    </customfields>
    </item>
</channel>
</rss>