MongoDB Severe RCE Flaw
cvweiss
HOBBYOP

3 months ago

https://www.bleepingcomputer.com/news/security/mongodb-warns-admins-to-patch-severe-rce-flaw-immediately/

I don't see any option to upgrade my MongoDB from 8.2.2 to something newer. What can I do to ensure my database has been updated?

$10 Bounty

5 Replies

dardameiz
PRO

3 months ago

Check the service settings and update the Docker image tag to mongo:8.2.3 or mongo:8 (for latest 8.x). Make sure to backup your data first since this involves redeploying the container.


cvweiss
HOBBYOP

3 months ago

@dardmeiz, I appreciate that feedback, there are no options for me to do this, it is a Railway MongoDB template that I am using.


jratienza65
HOBBY

3 months ago

Go to your MongoDB service > Click on settings > Under Source Image, click on the pencil icon > Update the image tag to the version you want.

See attached photo for reference.

Attachments


cvweiss
HOBBYOP

2 months ago

@jratienza65, that's helpful, thank you! I did some more digging and it seems we are at whim of the MongoDB Docker Hub, where the latest version is 8.2.3. Once 8.2.4 or newer shows up there, then we can update.

https://hub.docker.com/_/mongo

If I'm incorrect I'm sure someone will let me know slightly_smiling_face emoji


cvweiss

@jratienza65, that's helpful, thank you! I did some more digging and it seems we are at whim of the MongoDB Docker Hub, where the latest version is 8.2.3. Once 8.2.4 or newer shows up there, then we can update.https://hub.docker.com/_/mongoIf I'm incorrect I'm sure someone will let me know

jratienza65
HOBBY

3 months ago

You can always roll out your own docker image wink emoji


Loading...