<!-- 
RSS generated by JIRA (9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66) at Thu Feb 08 03:18:24 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>MongoDB Jira</title>
    <link>https://jira.mongodb.org</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.7.1</version>
        <build-number>970001</build-number>
        <build-date>13-04-2023</build-date>
    </build-info>


<item>
            <title>[SERVER-8770] Sign RPM packages available via the 10gen yum repository</title>
                <link>https://jira.mongodb.org/browse/SERVER-8770</link>
                <project id="10000" key="SERVER">Core Server</project>
                    <description>&lt;p&gt;Packages available from 10gen yum repository (and probably all provided packages) should be signed using a GPG/PGP key. It makes it harder to compromise a yum repository (it is not enough to just replace RPM in a repo).&lt;/p&gt;</description>
                <environment></environment>
        <key id="66633">SERVER-8770</key>
            <summary>Sign RPM packages available via the 10gen yum repository</summary>
                <type id="4" iconUrl="https://jira.mongodb.org/secure/viewavatar?size=xsmall&amp;avatarId=14710&amp;avatarType=issuetype">Improvement</type>
                                            <priority id="3" iconUrl="https://jira.mongodb.org/images/icons/priorities/major.svg">Major - P3</priority>
                        <status id="6" iconUrl="https://jira.mongodb.org/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="9">Done</resolution>
                                        <assignee username="ernie.hershey@mongodb.com">Ernie Hershey</assignee>
                                    <reporter username="szpak">Marcin Zaj?czkowski</reporter>
                        <labels>
                    </labels>
                <created>Wed, 27 Feb 2013 14:07:21 +0000</created>
                <updated>Tue, 16 Nov 2021 13:56:43 +0000</updated>
                            <resolved>Thu, 13 Aug 2015 00:03:02 +0000</resolved>
                                                    <fixVersion>3.0.8</fixVersion>
                    <fixVersion>3.1.7</fixVersion>
                                    <component>Packaging</component>
                                        <votes>26</votes>
                                    <watches>23</watches>
                                                                                                                <comments>
                            <comment id="1111548" author="xgen-internal-githook" created="Fri, 11 Dec 2015 00:13:35 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{u&apos;username&apos;: u&apos;ehershey&apos;, u&apos;name&apos;: u&apos;Ernie Hershey&apos;, u&apos;email&apos;: u&apos;ernie.hershey@10gen.com&apos;}
&lt;p&gt;Message: &lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-19893&quot; title=&quot;Generate packages on their own platforms&quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-19893&quot;&gt;&lt;del&gt;SERVER-19893&lt;/del&gt;&lt;/a&gt;, &lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-8770&quot; title=&quot;Sign RPM packages available via the 10gen yum repository&quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-8770&quot;&gt;&lt;del&gt;SERVER-8770&lt;/del&gt;&lt;/a&gt; Fix SUSE packaging script references&lt;/p&gt;

&lt;p&gt;I accidentally swapped Community and Enterprise while merging the&lt;br/&gt;
backport of these tickets.&lt;br/&gt;
Branch: v3.0&lt;br/&gt;
&lt;a href=&quot;https://github.com/mongodb/mongo/commit/4108a655c5bbc7d99192dfe44a5621a390596bcf&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo/commit/4108a655c5bbc7d99192dfe44a5621a390596bcf&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="1110917" author="xgen-internal-githook" created="Thu, 10 Dec 2015 17:02:37 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{u&apos;username&apos;: u&apos;ehershey&apos;, u&apos;name&apos;: u&apos;Ernie Hershey&apos;, u&apos;email&apos;: u&apos;ernie.hershey@10gen.com&apos;}
&lt;p&gt;Message: &lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-19893&quot; title=&quot;Generate packages on their own platforms&quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-19893&quot;&gt;&lt;del&gt;SERVER-19893&lt;/del&gt;&lt;/a&gt;, &lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-8770&quot; title=&quot;Sign RPM packages available via the 10gen yum repository&quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-8770&quot;&gt;&lt;del&gt;SERVER-8770&lt;/del&gt;&lt;/a&gt; - Fix notary client source archive extension&lt;br/&gt;
Branch: v3.0&lt;br/&gt;
&lt;a href=&quot;https://github.com/mongodb/mongo/commit/c824d36046be8a512e09174137da060ea6632dd6&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo/commit/c824d36046be8a512e09174137da060ea6632dd6&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="1106648" author="xgen-internal-githook" created="Sun, 6 Dec 2015 23:28:20 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{u&apos;username&apos;: u&apos;ehershey&apos;, u&apos;name&apos;: u&apos;Ernie Hershey&apos;, u&apos;email&apos;: u&apos;ernie.hershey@10gen.com&apos;}
&lt;p&gt;Message: &lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-19893&quot; title=&quot;Generate packages on their own platforms&quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-19893&quot;&gt;&lt;del&gt;SERVER-19893&lt;/del&gt;&lt;/a&gt;, &lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-14036&quot; title=&quot;Ubuntu Key File belongs to Richard Kreuter&quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-14036&quot;&gt;&lt;del&gt;SERVER-14036&lt;/del&gt;&lt;/a&gt;, &lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-8770&quot; title=&quot;Sign RPM packages available via the 10gen yum repository&quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-8770&quot;&gt;&lt;del&gt;SERVER-8770&lt;/del&gt;&lt;/a&gt; - Packaging improvements&lt;/p&gt;

&lt;ul&gt;
	&lt;li&gt;Signing RPM&apos;s&lt;/li&gt;
	&lt;li&gt;Signing .DEB&apos;s with organization key instead of Richard&apos;s key&lt;/li&gt;
	&lt;li&gt;Generating packages on individual platforms in compile tasks&lt;/li&gt;
	&lt;li&gt;Trimming redundant Enterprise packaging python code&lt;/li&gt;
	&lt;li&gt;Miscellaenous cleanup, mostly to support the above goals&lt;/li&gt;
&lt;/ul&gt;


&lt;p&gt;(cherry picked from commit ed856e8865097d996894f50893b2be479c5644fc)&lt;br/&gt;
Branch: v3.0&lt;br/&gt;
&lt;a href=&quot;https://github.com/mongodb/mongo/commit/7ecff41d2fb6983abe8061b303720d3d14f9c6cc&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo/commit/7ecff41d2fb6983abe8061b303720d3d14f9c6cc&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="1090664" author="tehmasp.chaudhri@jumpcloud.com" created="Tue, 17 Nov 2015 16:59:42 +0000"  >&lt;p&gt;@Ernie - can we please update the docs? I&apos;m tracking this issue. I tried looking for a key on the repo.mongodb.com server but cannot find one for signed installation of packages for RHEL/CentOS.&lt;/p&gt;

&lt;p&gt;Thanks very much!&lt;br/&gt;
Tehmasp&lt;/p&gt;</comment>
                            <comment id="1003910" author="ernie.hershey@10gen.com" created="Thu, 13 Aug 2015 00:03:02 +0000"  >&lt;p&gt;We need to update the RPM installation docs for Community and Enterprise to include gpg verification and importing our public key. &lt;/p&gt;</comment>
                            <comment id="1003886" author="xgen-internal-githook" created="Wed, 12 Aug 2015 23:25:42 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{u&apos;username&apos;: u&apos;ehershey&apos;, u&apos;name&apos;: u&apos;Ernie Hershey&apos;, u&apos;email&apos;: u&apos;ernie.hershey@10gen.com&apos;}
&lt;p&gt;Message: &lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-19893&quot; title=&quot;Generate packages on their own platforms&quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-19893&quot;&gt;&lt;del&gt;SERVER-19893&lt;/del&gt;&lt;/a&gt;, &lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-14036&quot; title=&quot;Ubuntu Key File belongs to Richard Kreuter&quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-14036&quot;&gt;&lt;del&gt;SERVER-14036&lt;/del&gt;&lt;/a&gt;, &lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-8770&quot; title=&quot;Sign RPM packages available via the 10gen yum repository&quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-8770&quot;&gt;&lt;del&gt;SERVER-8770&lt;/del&gt;&lt;/a&gt; - Packaging improvements&lt;/p&gt;

&lt;ul&gt;
	&lt;li&gt;Signing RPM&apos;s&lt;/li&gt;
	&lt;li&gt;Signing .DEB&apos;s with organization key instead of Richard&apos;s key&lt;/li&gt;
	&lt;li&gt;Generating packages on individual platforms in compile tasks&lt;/li&gt;
	&lt;li&gt;Trimming redundant Enterprise packaging python code&lt;/li&gt;
	&lt;li&gt;Miscellaenous cleanup, mostly to support the above goals&lt;br/&gt;
Branch: master&lt;br/&gt;
&lt;a href=&quot;https://github.com/mongodb/mongo/commit/ed856e8865097d996894f50893b2be479c5644fc&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo/commit/ed856e8865097d996894f50893b2be479c5644fc&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
</comment>
                            <comment id="909721" author="driskell" created="Mon, 11 May 2015 09:07:33 +0000"  >&lt;p&gt;Thanks &lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=ernie.hershey%4010gen.com&quot; class=&quot;user-hover&quot; rel=&quot;ernie.hershey@10gen.com&quot;&gt;ernie.hershey@10gen.com&lt;/a&gt; - good to see progress!&lt;/p&gt;

&lt;p&gt;Regarding documentation:&lt;br/&gt;
&lt;a href=&quot;http://docs.mongodb.org/manual/tutorial/install-mongodb-on-red-hat-centos-or-fedora-linux/&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;http://docs.mongodb.org/manual/tutorial/install-mongodb-on-red-hat-centos-or-fedora-linux/&lt;/a&gt;&lt;br/&gt;
This still references HTTP and not HTTPS - I think it should be updated. Also - there&apos;s still no warning regarding gpgcheck=0 dangers. Additionally, no reference back to this ticket to get it the visibility it needs.&lt;/p&gt;

&lt;p&gt;I appreciate time constraints and other work might be the cause - but from a user perspective, I cannot see very much being more important than ensuring official downloads and package repositories are secure and we are educated correctly as to the risks.&lt;/p&gt;

&lt;p&gt;Looking forward to GPG packaging.&lt;/p&gt;</comment>
                            <comment id="861076" author="ernie.hershey@10gen.com" created="Mon, 23 Mar 2015 16:52:57 +0000"  >&lt;p&gt;I&apos;m sorry this isn&apos;t in place yet. If it helps, all packages from 3.0 forward are available over SSL at &lt;a href=&quot;https://repo.mongodb.org/&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://repo.mongodb.org/&lt;/a&gt;. Additionally all binary tarballs  are available over SSL at &lt;a href=&quot;https://fastdl.mongodb.org/&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://fastdl.mongodb.org/&lt;/a&gt; - for example - &lt;a href=&quot;https://fastdl.mongodb.org/linux/mongodb-linux-x86_64-2.6.8.tgz&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://fastdl.mongodb.org/linux/mongodb-linux-x86_64-2.6.8.tgz&lt;/a&gt;. All binary tarballs from 2.6 forward are also signed with signatures available by appending .sig to the download URL - for example - &lt;a href=&quot;https://fastdl.mongodb.org/linux/mongodb-linux-x86_64-2.6.8.tgz.sig&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://fastdl.mongodb.org/linux/mongodb-linux-x86_64-2.6.8.tgz.sig&lt;/a&gt;. The public key is available at &lt;a href=&quot;https://www.mongodb.org/static/pgp/server-2.6.asc&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://www.mongodb.org/static/pgp/server-2.6.asc&lt;/a&gt;.&lt;/p&gt;</comment>
                            <comment id="860022" author="jaroml@gradecam.com" created="Sat, 21 Mar 2015 15:04:25 +0000"  >&lt;p&gt;I 100% agree with Jason Woods. The lack of a signature and providing the files over HTPP instead of HTTPS is a serious issue and needs to be rectified. This is a very serious security oversight from MongoDB and is even more unacceptable for their enterprise packages. These are paying customers who are being exposed to security risks due to an unacceptable lack of security from their database vendor. (We are one such customer.)&lt;/p&gt;</comment>
                            <comment id="807667" author="driskell" created="Mon, 19 Jan 2015 16:09:07 +0000"  >&lt;p&gt;It may also be beneficial to add a note to this ticket in the documentation next to the notice about unsigned packages and security implications. That will at least allow you to gather more accurate impact/exposure counts, as it will likely bring it more votes.&lt;/p&gt;</comment>
                            <comment id="807666" author="driskell" created="Mon, 19 Jan 2015 16:07:23 +0000"  >&lt;p&gt;&lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=ernie.hershey%4010gen.com&quot; class=&quot;user-hover&quot; rel=&quot;ernie.hershey@10gen.com&quot;&gt;ernie.hershey@10gen.com&lt;/a&gt; Any idea on when this may be implemented?&lt;/p&gt;

&lt;p&gt;I can see why there are small number of votes though. The official Mongo documentation explicitly tells the user to setup an inherently insecure package repository. I would advise that this documentation is updated to NOT do this. There is absolutely no warning there at all and WILL create a growing community of users who can be attacked via their mongodb repository, simply by DNS or other method of injecting malicious packages.&lt;/p&gt;

&lt;p&gt;Personally, I think the combination of unsigned packages, and endorsing unsigned packages in the documentation, should be treated with the utmost urgency. At the very least, the documentation updated to emphasis to users that this needs to be addressed in their security policies.&lt;/p&gt;

&lt;p&gt;Documentation here: &lt;a href=&quot;http://docs.mongodb.org/manual/tutorial/install-mongodb-on-red-hat-centos-or-fedora-linux/&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;http://docs.mongodb.org/manual/tutorial/install-mongodb-on-red-hat-centos-or-fedora-linux/&lt;/a&gt;&lt;br/&gt;
You can see the &quot;gpgcheck=0&quot; in the snippets with absolutely no explanation.&lt;br/&gt;
On a side note - the SELinux &quot;implications&quot; could be more clear too.&lt;/p&gt;</comment>
                            <comment id="773601" author="michelep" created="Wed, 26 Nov 2014 19:14:55 +0000"  >&lt;p&gt;Hi,&lt;br/&gt;
How can we get this issue prioritized?&lt;br/&gt;
On my side, I cannot move forward without it. The packages from the MongoDB repo have to be signed.&lt;br/&gt;
Please advise.&lt;/p&gt;</comment>
                            <comment id="773554" author="ernie.hershey@10gen.com" created="Wed, 26 Nov 2014 18:17:05 +0000"  >&lt;p&gt;&lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=jkramarz&quot; class=&quot;user-hover&quot; rel=&quot;jkramarz&quot;&gt;jkramarz&lt;/a&gt; - thanks a lot for your interest in participating. The work that needs to be done to sign RPM packages is in internal processes so the most helpful participation at the moment is to voting for this ticket and commenting to let us know that it&apos;s important to you.&lt;/p&gt;</comment>
                            <comment id="759963" author="jkramarz" created="Mon, 10 Nov 2014 12:47:22 +0000"  >&lt;p&gt;I&apos;ve been deploying Spacewalk server for my company and ran into unsigned MongoDB packages problem.&lt;br/&gt;
As I have to get them signed at some stage, I&apos;d rather prefer to help solving this issue instead of signing them locally after repository synchronization.&lt;br/&gt;
So... how can I participate?&lt;/p&gt;</comment>
                            <comment id="699555" author="driskell" created="Fri, 22 Aug 2014 09:39:16 +0000"  >&lt;p&gt;Any update on when this might happen?&lt;/p&gt;

&lt;p&gt;The repository URLs are HTTP too which renders the repository unusable in any security conscious environment.&lt;br/&gt;
GPG signing would be great, and then the GPG key just needs to be on a HTTPS site like the other downloads I guess.&lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10011">
                    <name>Depends</name>
                                                                <inwardlinks description="is depended on by">
                                                        </inwardlinks>
                                    </issuelinktype>
                            <issuelinktype id="10012">
                    <name>Related</name>
                                            <outwardlinks description="related to">
                                        <issuelink>
            <issuekey id="203298">DOCS-5411</issuekey>
        </issuelink>
            <issuelink>
            <issuekey id="270927">DOCS-7370</issuekey>
        </issuelink>
                            </outwardlinks>
                                                                <inwardlinks description="is related to">
                                        <issuelink>
            <issuekey id="35070">SERVER-5455</issuekey>
        </issuelink>
            <issuelink>
            <issuekey id="137767">SERVER-14036</issuekey>
        </issuelink>
            <issuelink>
            <issuekey id="170525">SERVER-19893</issuekey>
        </issuelink>
                            </inwardlinks>
                                    </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                <customfield id="customfield_10050" key="com.atlassian.jira.toolkit:comments">
                        <customfieldname># Replies</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>15.0</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_18555" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname># of Sprints</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>6.0</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_12451" key="com.atlassian.jira.plugin.system.customfieldtypes:multiversion">
                        <customfieldname>Backport Completed</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue id="15884">3.0.8</customfieldvalue>
    
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10011" key="com.atlassian.jira.plugin.system.customfieldtypes:radiobuttons">
                        <customfieldname>Backwards Compatibility</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10011"><![CDATA[Minor Change]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                            <customfield id="customfield_10055" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>Date of 1st Reply</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Sat, 6 Jul 2013 01:21:11 +0000</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10052" key="com.atlassian.jira.toolkit:dayslastcommented">
                        <customfieldname>Days since reply</customfieldname>
                        <customfieldvalues>
                                        8 years, 9 weeks, 6 days ago
    
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_18254" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Dependencies</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue><![CDATA[]]></customfieldvalue>


                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_15850" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                            <customfield id="customfield_10857" key="com.pyxis.greenhopper.jira:gh-epic-link">
                        <customfieldname>Epic Link</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>BUILD-17069</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_10057" key="com.atlassian.jira.toolkit:lastusercommented">
                        <customfieldname>Last comment by Customer</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>true</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10056" key="com.atlassian.jira.toolkit:lastupdaterorcommenter">
                        <customfieldname>Last commenter</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>luke.bonanomi@mongodb.com</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_11151" key="com.atlassian.jira.toolkit:LastCommentDate">
                        <customfieldname>Last public comment date</customfieldname>
                        <customfieldvalues>
                            8 years, 9 weeks, 6 days ago
                        </customfieldvalues>
                    </customfield>
                                                                                                                        <customfield id="customfield_10000" key="com.atlassian.jira.plugin.system.customfieldtypes:radiobuttons">
                        <customfieldname>Old_Backport</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10000"><![CDATA[No]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_10051" key="com.atlassian.jira.toolkit:participants">
                        <customfieldname>Participants</customfieldname>
                        <customfieldvalues>
                                        <customfieldvalue>ernie.hershey@mongodb.com</customfieldvalue>
            <customfieldvalue>xgen-internal-githook</customfieldvalue>
            <customfieldvalue>jkramarz</customfieldvalue>
            <customfieldvalue>jaroml@gradecam.com</customfieldvalue>
            <customfieldvalue>driskell</customfieldvalue>
            <customfieldvalue>szpak</customfieldvalue>
            <customfieldvalue>michelep</customfieldvalue>
            <customfieldvalue>tehmasp.chaudhri@jumpcloud.com</customfieldvalue>
    
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                        <customfield id="customfield_14254" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Product Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|hrn3zb:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_12550" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2|hreebj:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10558" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2247</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                <customfield id="customfield_10557" key="com.pyxis.greenhopper.jira:gh-sprint">
                        <customfieldname>Sprint</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue id="477">BUILD 2 04/24/15</customfieldvalue>
    <customfieldvalue id="541">BUILD 4 06/05/15</customfieldvalue>
    <customfieldvalue id="568">Build 5 06/26/16</customfieldvalue>
    <customfieldvalue id="577">Build 6 07/17/15</customfieldvalue>
    <customfieldvalue id="625">Build 7 08/10/15</customfieldvalue>
    <customfieldvalue id="626">Build 8 08/31/15</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                            <customfield id="customfield_10053" key="com.atlassian.jira.ext.charting:timeinstatus">
                        <customfieldname>Time In Status</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_22870" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Triagers</customfieldname>
                        <customfieldvalues>
                                

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_14350" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>serverRank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|hrkyan:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                    </customfields>
    </item>
</channel>
</rss>