I've validated that this patch works for mongodb. Thanks @amrith for the patch!
@fungi it was mentioned that we should audit the other datastores in trove and i looked them over. While I believe we should look at fixing this across all the datastores this bug was representing just mongodb. But you bring up a good point. The concern was if we released this patch then there is a possibility of the other datastores being compromised if they are running in production.
There is a mild risk here if the instances are created on a shared network rather than a private user network though.
I've validated that this patch works for mongodb. Thanks @amrith for the patch!
@fungi it was mentioned that we should audit the other datastores in trove and i looked them over. While I believe we should look at fixing this across all the datastores this bug was representing just mongodb. But you bring up a good point. The concern was if we released this patch then there is a possibility of the other datastores being compromised if they are running in production.
There is a mild risk here if the instances are created on a shared network rather than a private user network though.