News for hackers. Stuff that matters.

A comment on MongoDB Server Security Update, December 2025. Parent comment

Re:MongoDB Server Security Update, December 2025 by computerfan494 on Monday December 29, 2025 @08:02PM (#46428226)
That's a good question. I suppose that posting the patch makes it incredibly obvious how to exploit the issue, so maybe they wanted to wait a little bit longer for their on-prem users who were slow to patch?
[ Parent | on HN ]
Re:MongoDB Server Security Update, December 2025 by philipwhiuk on Monday December 29, 2025 @09:06PM (#46428674)
Posting the CVE and then the patch is the reverse of this.
[ Parent | on HN ]
Re:MongoDB Server Security Update, December 2025 by computerfan494 on Monday December 29, 2025 @09:13PM (#46428712)
By "patch" I am talking about the public commit. Updated binaries were made available when the CVE was published.
[ Parent | on HN ]
Re:MongoDB Server Security Update, December 2025 by philipwhiuk on Monday January 05, 2026 @08:58AM (#46498790)
That's not what the blog post implies given they only told people how to update aftwards.
[ Parent | on HN ]