[security] Update mongo, esp. for CVE-2025-14847 #20567

tianon · 2025-12-29T19:50:20Z

CVE-2025-14847 ("MongoBleed"; https://jira.mongodb.org/browse/SERVER-115508; docker-library/mongo#742)

This includes 4.4 and 5.0 which are on the EOL Ubuntu 20.04 (Focal) release for a one-off rebuild -- once the builds are done and published, these will be removed again (with 6.0) as they're all extremely end-of-life and should not be used.

Changes:

docker-library/mongo@1f45e2b: Merge pull request Temporarily add back 4.4 and 5.0 for CVE-2025-14847 mongo#744 from infosiftr/eol
docker-library/mongo@f919239: Temporarily add back 4.4 and 5.0 for CVE-2025-14847
docker-library/mongo@2328ca2: Minor fixup to EOL dates
docker-library/mongo@85ba256: Merge pull request Revive 6.0 to deploy mongobleed fix mongo#743 from orgads/mongobleed-legacy
docker-library/mongo@6674f2b: Revive 6.0 to deploy mongobleed fix

Changes: - docker-library/mongo@1f45e2b: Merge pull request docker-library/mongo#744 from infosiftr/eol - docker-library/mongo@f919239: Temporarily add back 4.4 and 5.0 for CVE-2025-14847 - docker-library/mongo@2328ca2: Minor fixup to EOL dates - docker-library/mongo@85ba256: Merge pull request docker-library/mongo#743 from orgads/mongobleed-legacy - docker-library/mongo@6674f2b: Revive 6.0 to deploy mongobleed fix

github-actions · 2025-12-29T19:51:43Z

Diff for 940064e:

diff --git a/_bashbrew-cat b/_bashbrew-cat
index 48b5bf5..31b2482 100644
--- a/_bashbrew-cat
+++ b/_bashbrew-cat
@@ -1,6 +1,87 @@
 Maintainers: Tianon Gravi <[email protected]> (@tianon), Joseph Ferguson <[email protected]> (@yosifkit)
 GitRepo: https://github.com/docker-library/mongo.git
 
+Tags: 4.4.30-focal, 4.4-focal
+SharedTags: 4.4.30, 4.4
+Architectures: amd64, arm64v8
+GitCommit: f91923968d124196f9d3dc16de787fc96044015f
+Directory: 4.4
+
+Tags: 4.4.30-nanoserver-ltsc2022, 4.4-nanoserver-ltsc2022
+SharedTags: 4.4.30-nanoserver, 4.4-nanoserver
+Architectures: windows-amd64
+GitCommit: f91923968d124196f9d3dc16de787fc96044015f
+Directory: 4.4/windows/nanoserver-ltsc2022
+Constraints: nanoserver-ltsc2022, windowsservercore-ltsc2022
+
+Tags: 4.4.30-windowsservercore-ltsc2022, 4.4-windowsservercore-ltsc2022
+SharedTags: 4.4.30-windowsservercore, 4.4-windowsservercore, 4.4.30, 4.4
+Architectures: windows-amd64
+GitCommit: f91923968d124196f9d3dc16de787fc96044015f
+Directory: 4.4/windows/windowsservercore-ltsc2022
+Constraints: windowsservercore-ltsc2022
+
+Tags: 4.4.30-windowsservercore-ltsc2025, 4.4-windowsservercore-ltsc2025
+SharedTags: 4.4.30-windowsservercore, 4.4-windowsservercore, 4.4.30, 4.4
+Architectures: windows-amd64
+GitCommit: f91923968d124196f9d3dc16de787fc96044015f
+Directory: 4.4/windows/windowsservercore-ltsc2025
+Constraints: windowsservercore-ltsc2025
+
+Tags: 5.0.32-focal, 5.0-focal
+SharedTags: 5.0.32, 5.0
+Architectures: amd64, arm64v8
+GitCommit: f91923968d124196f9d3dc16de787fc96044015f
+Directory: 5.0
+
+Tags: 5.0.32-nanoserver-ltsc2022, 5.0-nanoserver-ltsc2022
+SharedTags: 5.0.32-nanoserver, 5.0-nanoserver
+Architectures: windows-amd64
+GitCommit: f91923968d124196f9d3dc16de787fc96044015f
+Directory: 5.0/windows/nanoserver-ltsc2022
+Constraints: nanoserver-ltsc2022, windowsservercore-ltsc2022
+
+Tags: 5.0.32-windowsservercore-ltsc2022, 5.0-windowsservercore-ltsc2022
+SharedTags: 5.0.32-windowsservercore, 5.0-windowsservercore, 5.0.32, 5.0
+Architectures: windows-amd64
+GitCommit: f91923968d124196f9d3dc16de787fc96044015f
+Directory: 5.0/windows/windowsservercore-ltsc2022
+Constraints: windowsservercore-ltsc2022
+
+Tags: 5.0.32-windowsservercore-ltsc2025, 5.0-windowsservercore-ltsc2025
+SharedTags: 5.0.32-windowsservercore, 5.0-windowsservercore, 5.0.32, 5.0
+Architectures: windows-amd64
+GitCommit: f91923968d124196f9d3dc16de787fc96044015f
+Directory: 5.0/windows/windowsservercore-ltsc2025
+Constraints: windowsservercore-ltsc2025
+
+Tags: 6.0.27-jammy, 6.0-jammy, 6-jammy
+SharedTags: 6.0.27, 6.0, 6
+Architectures: amd64, arm64v8
+GitCommit: 6674f2b071d74581d20e5eb81418fcfe2b675a85
+Directory: 6.0
+
+Tags: 6.0.27-nanoserver-ltsc2022, 6.0-nanoserver-ltsc2022, 6-nanoserver-ltsc2022
+SharedTags: 6.0.27-nanoserver, 6.0-nanoserver, 6-nanoserver
+Architectures: windows-amd64
+GitCommit: 6674f2b071d74581d20e5eb81418fcfe2b675a85
+Directory: 6.0/windows/nanoserver-ltsc2022
+Constraints: nanoserver-ltsc2022, windowsservercore-ltsc2022
+
+Tags: 6.0.27-windowsservercore-ltsc2022, 6.0-windowsservercore-ltsc2022, 6-windowsservercore-ltsc2022
+SharedTags: 6.0.27-windowsservercore, 6.0-windowsservercore, 6-windowsservercore, 6.0.27, 6.0, 6
+Architectures: windows-amd64
+GitCommit: 6674f2b071d74581d20e5eb81418fcfe2b675a85
+Directory: 6.0/windows/windowsservercore-ltsc2022
+Constraints: windowsservercore-ltsc2022
+
+Tags: 6.0.27-windowsservercore-ltsc2025, 6.0-windowsservercore-ltsc2025, 6-windowsservercore-ltsc2025
+SharedTags: 6.0.27-windowsservercore, 6.0-windowsservercore, 6-windowsservercore, 6.0.27, 6.0, 6
+Architectures: windows-amd64
+GitCommit: 6674f2b071d74581d20e5eb81418fcfe2b675a85
+Directory: 6.0/windows/windowsservercore-ltsc2025
+Constraints: windowsservercore-ltsc2025
+
 Tags: 7.0.28-jammy, 7.0-jammy, 7-jammy
 SharedTags: 7.0.28, 7.0, 7
 Architectures: amd64, arm64v8
diff --git a/_bashbrew-list b/_bashbrew-list
index 9cfc69f..d086768 100644
--- a/_bashbrew-list
+++ b/_bashbrew-list
@@ -1,3 +1,52 @@
+mongo:4.4
+mongo:4.4-focal
+mongo:4.4-nanoserver
+mongo:4.4-nanoserver-ltsc2022
+mongo:4.4-windowsservercore
+mongo:4.4-windowsservercore-ltsc2022
+mongo:4.4-windowsservercore-ltsc2025
+mongo:4.4.30
+mongo:4.4.30-focal
+mongo:4.4.30-nanoserver
+mongo:4.4.30-nanoserver-ltsc2022
+mongo:4.4.30-windowsservercore
+mongo:4.4.30-windowsservercore-ltsc2022
+mongo:4.4.30-windowsservercore-ltsc2025
+mongo:5.0
+mongo:5.0-focal
+mongo:5.0-nanoserver
+mongo:5.0-nanoserver-ltsc2022
+mongo:5.0-windowsservercore
+mongo:5.0-windowsservercore-ltsc2022
+mongo:5.0-windowsservercore-ltsc2025
+mongo:5.0.32
+mongo:5.0.32-focal
+mongo:5.0.32-nanoserver
+mongo:5.0.32-nanoserver-ltsc2022
+mongo:5.0.32-windowsservercore
+mongo:5.0.32-windowsservercore-ltsc2022
+mongo:5.0.32-windowsservercore-ltsc2025
+mongo:6
+mongo:6-jammy
+mongo:6-nanoserver
+mongo:6-nanoserver-ltsc2022
+mongo:6-windowsservercore
+mongo:6-windowsservercore-ltsc2022
+mongo:6-windowsservercore-ltsc2025
+mongo:6.0
+mongo:6.0-jammy
+mongo:6.0-nanoserver
+mongo:6.0-nanoserver-ltsc2022
+mongo:6.0-windowsservercore
+mongo:6.0-windowsservercore-ltsc2022
+mongo:6.0-windowsservercore-ltsc2025
+mongo:6.0.27
+mongo:6.0.27-jammy
+mongo:6.0.27-nanoserver
+mongo:6.0.27-nanoserver-ltsc2022
+mongo:6.0.27-windowsservercore
+mongo:6.0.27-windowsservercore-ltsc2022
+mongo:6.0.27-windowsservercore-ltsc2025
 mongo:7
 mongo:7-jammy
 mongo:7-nanoserver
diff --git a/_bashbrew-list-build-order b/_bashbrew-list-build-order
index d89f246..01d6226 100644
--- a/_bashbrew-list-build-order
+++ b/_bashbrew-list-build-order
@@ -1,3 +1,12 @@
+mongo:4.4-focal
+mongo:4.4-windowsservercore-ltsc2022
+mongo:4.4-windowsservercore-ltsc2025
+mongo:5.0-focal
+mongo:5.0-windowsservercore-ltsc2022
+mongo:5.0-windowsservercore-ltsc2025
+mongo:6-jammy
+mongo:6-windowsservercore-ltsc2022
+mongo:6-windowsservercore-ltsc2025
 mongo:7-jammy
 mongo:7-windowsservercore-ltsc2022
 mongo:7-windowsservercore-ltsc2025
@@ -7,6 +16,9 @@ mongo:8.0-windowsservercore-ltsc2025
 mongo:noble
 mongo:windowsservercore-ltsc2022
 mongo:windowsservercore-ltsc2025
+mongo:4.4-nanoserver-ltsc2022
+mongo:5.0-nanoserver-ltsc2022
+mongo:6-nanoserver-ltsc2022
 mongo:7-nanoserver-ltsc2022
 mongo:8.0-nanoserver-ltsc2022
 mongo:nanoserver-ltsc2022
diff --git a/mongo_7-jammy/Dockerfile b/mongo_4.4-focal/Dockerfile
similarity index 88%
copy from mongo_7-jammy/Dockerfile
copy to mongo_4.4-focal/Dockerfile
index 63d4ee8..8021f24 100644
--- a/mongo_7-jammy/Dockerfile
+++ b/mongo_4.4-focal/Dockerfile
@@ -4,7 +4,7 @@
 # PLEASE DO NOT EDIT IT DIRECTLY.
 #
 
-FROM ubuntu:jammy
+FROM ubuntu:focal
 
 # add our user and group first to make sure their IDs get assigned consistently, regardless of whatever dependencies get added
 RUN set -eux; \
@@ -59,10 +59,10 @@ RUN set -eux; \
 	\
 # download/install MongoDB PGP keys
 	export GNUPGHOME="$(mktemp -d)"; \
-	wget -O KEYS 'https://pgp.mongodb.com/server-7.0.asc'; \
+	wget -O KEYS 'https://pgp.mongodb.com/server-4.4.asc'; \
 	gpg --batch --import KEYS; \
 	mkdir -p /etc/apt/keyrings; \
-	gpg --batch --export --armor 'E58830201F7DD82CD808AA84160D26BB1785BA38' > /etc/apt/keyrings/mongodb.asc; \
+	gpg --batch --export --armor '20691EEC35216C63CAF66CE1656408E390CFB1F5' > /etc/apt/keyrings/mongodb.asc; \
 	gpgconf --kill all; \
 	rm -rf "$GNUPGHOME" KEYS; \
 	\
@@ -85,12 +85,12 @@ ARG MONGO_PACKAGE=mongodb-org
 ARG MONGO_REPO=repo.mongodb.org
 ENV MONGO_PACKAGE=${MONGO_PACKAGE} MONGO_REPO=${MONGO_REPO}
 
-ENV MONGO_MAJOR 7.0
-RUN echo "deb [ signed-by=/etc/apt/keyrings/mongodb.asc ] http://$MONGO_REPO/apt/ubuntu jammy/${MONGO_PACKAGE%-unstable}/$MONGO_MAJOR multiverse" | tee "/etc/apt/sources.list.d/${MONGO_PACKAGE%-unstable}.list"
+ENV MONGO_MAJOR 4.4
+RUN echo "deb [ signed-by=/etc/apt/keyrings/mongodb.asc ] http://$MONGO_REPO/apt/ubuntu focal/${MONGO_PACKAGE%-unstable}/$MONGO_MAJOR multiverse" | tee "/etc/apt/sources.list.d/${MONGO_PACKAGE%-unstable}.list"
 
-# https://docs.mongodb.org/master/release-notes/7.0/
-ENV MONGO_VERSION 7.0.28
-# 12/16/2025, https://github.com/mongodb/mongo/tree/cfc346c59d2cc3dbc903507fc642e22e3097f362
+# https://docs.mongodb.org/master/release-notes/4.4/
+ENV MONGO_VERSION 4.4.30
+# 12/18/2025, https://github.com/mongodb/mongo/tree/4d7fa6a6260d25c5caa971dce10561690cb79dea
 
 RUN set -x \
 # installing "mongodb-enterprise" pulls in "tzdata" which prompts for input
@@ -102,8 +102,6 @@ RUN set -x \
 		${MONGO_PACKAGE}-shell=$MONGO_VERSION \
 		${MONGO_PACKAGE}-mongos=$MONGO_VERSION \
 		${MONGO_PACKAGE}-tools=$MONGO_VERSION \
-		${MONGO_PACKAGE}-database=$MONGO_VERSION \
-		${MONGO_PACKAGE}-database-tools-extra=$MONGO_VERSION \
 	&& rm -rf /var/lib/apt/lists/* \
 	&& rm -rf /var/lib/mongodb \
 	&& mv /etc/mongod.conf /etc/mongod.conf.orig
diff --git a/mongo_7-jammy/docker-entrypoint.sh b/mongo_4.4-focal/docker-entrypoint.sh
similarity index 100%
copy from mongo_7-jammy/docker-entrypoint.sh
copy to mongo_4.4-focal/docker-entrypoint.sh
diff --git a/mongo_8.0-nanoserver-ltsc2022/Dockerfile b/mongo_4.4-nanoserver-ltsc2022/Dockerfile
similarity index 72%
copy from mongo_8.0-nanoserver-ltsc2022/Dockerfile
copy to mongo_4.4-nanoserver-ltsc2022/Dockerfile
index 3cd1004..c129efe 100644
--- a/mongo_8.0-nanoserver-ltsc2022/Dockerfile
+++ b/mongo_4.4-nanoserver-ltsc2022/Dockerfile
@@ -14,18 +14,18 @@ RUN setx /m PATH "C:\mongodb\bin;%PATH%"
 USER ContainerUser
 # doing this first to share cache across versions more aggressively
 
-COPY --from=mongo:8.0.17-windowsservercore-ltsc2022 \
+COPY --from=mongo:4.4.30-windowsservercore-ltsc2022 \
 	C:\\Windows\\System32\\msvcp140.dll \
 	C:\\Windows\\System32\\msvcp140_1.dll \
 	C:\\Windows\\System32\\vcruntime140.dll \
 	C:\\Windows\\System32\\vcruntime140_1.dll \
 	C:\\Windows\\System32\\
 
-# https://docs.mongodb.org/master/release-notes/8.0/
-ENV MONGO_VERSION 8.0.17
-# 12/16/2025, https://github.com/mongodb/mongo/tree/b20e43625b72f4bb43cc15107f80ac966ae13b6d
+# https://docs.mongodb.org/master/release-notes/4.4/
+ENV MONGO_VERSION 4.4.30
+# 12/18/2025, https://github.com/mongodb/mongo/tree/4d7fa6a6260d25c5caa971dce10561690cb79dea
 
-COPY --from=mongo:8.0.17-windowsservercore-ltsc2022 C:\\mongodb C:\\mongodb
+COPY --from=mongo:4.4.30-windowsservercore-ltsc2022 C:\\mongodb C:\\mongodb
 RUN mongod --version
 
 VOLUME C:\\data\\db C:\\data\\configdb
diff --git a/mongo_8.0-windowsservercore-ltsc2022/Dockerfile b/mongo_4.4-windowsservercore-ltsc2022/Dockerfile
similarity index 87%
copy from mongo_8.0-windowsservercore-ltsc2022/Dockerfile
copy to mongo_4.4-windowsservercore-ltsc2022/Dockerfile
index e326678..56432f2 100644
--- a/mongo_8.0-windowsservercore-ltsc2022/Dockerfile
+++ b/mongo_4.4-windowsservercore-ltsc2022/Dockerfile
@@ -8,12 +8,12 @@ FROM mcr.microsoft.com/windows/servercore:ltsc2022
 
 SHELL ["powershell", "-Command", "$ErrorActionPreference = 'Stop';"]
 
-# https://docs.mongodb.org/master/release-notes/8.0/
-ENV MONGO_VERSION 8.0.17
-# 12/16/2025, https://github.com/mongodb/mongo/tree/b20e43625b72f4bb43cc15107f80ac966ae13b6d
+# https://docs.mongodb.org/master/release-notes/4.4/
+ENV MONGO_VERSION 4.4.30
+# 12/18/2025, https://github.com/mongodb/mongo/tree/4d7fa6a6260d25c5caa971dce10561690cb79dea
 
-ENV MONGO_DOWNLOAD_URL https://fastdl.mongodb.org/windows/mongodb-windows-x86_64-8.0.17-signed.msi
-ENV MONGO_DOWNLOAD_SHA256=4481f5af2795a6a1d74f22bcb5f0e52eeead96ac993a45ccbc50107e4a38b489
+ENV MONGO_DOWNLOAD_URL https://fastdl.mongodb.org/windows/mongodb-windows-x86_64-4.4.30-signed.msi
+ENV MONGO_DOWNLOAD_SHA256=c635b5ab758e4d37a248295009f6f12948125dcaec7303be276f2cce31170e46
 
 RUN Write-Host ('Downloading {0} ...' -f $env:MONGO_DOWNLOAD_URL); \
 	[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; \
diff --git a/mongo_windowsservercore-ltsc2025/Dockerfile b/mongo_4.4-windowsservercore-ltsc2025/Dockerfile
similarity index 87%
copy from mongo_windowsservercore-ltsc2025/Dockerfile
copy to mongo_4.4-windowsservercore-ltsc2025/Dockerfile
index 71e4058..a2f3b27 100644
--- a/mongo_windowsservercore-ltsc2025/Dockerfile
+++ b/mongo_4.4-windowsservercore-ltsc2025/Dockerfile
@@ -8,12 +8,12 @@ FROM mcr.microsoft.com/windows/servercore:ltsc2025
 
 SHELL ["powershell", "-Command", "$ErrorActionPreference = 'Stop';"]
 
-# https://docs.mongodb.org/master/release-notes/8.2/
-ENV MONGO_VERSION 8.2.3
-# 12/15/2025, https://github.com/mongodb/mongo/tree/36f41c9c30a2f13f834d033ba03c3463c891fb01
+# https://docs.mongodb.org/master/release-notes/4.4/
+ENV MONGO_VERSION 4.4.30
+# 12/18/2025, https://github.com/mongodb/mongo/tree/4d7fa6a6260d25c5caa971dce10561690cb79dea
 
-ENV MONGO_DOWNLOAD_URL https://fastdl.mongodb.org/windows/mongodb-windows-x86_64-8.2.3-signed.msi
-ENV MONGO_DOWNLOAD_SHA256=dbad91532fd5f5bb5b42818ce7a644dd603a388926303b306e23ef29a640e849
+ENV MONGO_DOWNLOAD_URL https://fastdl.mongodb.org/windows/mongodb-windows-x86_64-4.4.30-signed.msi
+ENV MONGO_DOWNLOAD_SHA256=c635b5ab758e4d37a248295009f6f12948125dcaec7303be276f2cce31170e46
 
 RUN Write-Host ('Downloading {0} ...' -f $env:MONGO_DOWNLOAD_URL); \
 	[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; \
diff --git a/mongo_7-jammy/Dockerfile b/mongo_5.0-focal/Dockerfile
similarity index 88%
copy from mongo_7-jammy/Dockerfile
copy to mongo_5.0-focal/Dockerfile
index 63d4ee8..f90fd6e 100644
--- a/mongo_7-jammy/Dockerfile
+++ b/mongo_5.0-focal/Dockerfile
@@ -4,7 +4,7 @@
 # PLEASE DO NOT EDIT IT DIRECTLY.
 #
 
-FROM ubuntu:jammy
+FROM ubuntu:focal
 
 # add our user and group first to make sure their IDs get assigned consistently, regardless of whatever dependencies get added
 RUN set -eux; \
@@ -59,10 +59,10 @@ RUN set -eux; \
 	\
 # download/install MongoDB PGP keys
 	export GNUPGHOME="$(mktemp -d)"; \
-	wget -O KEYS 'https://pgp.mongodb.com/server-7.0.asc'; \
+	wget -O KEYS 'https://pgp.mongodb.com/server-5.0.asc'; \
 	gpg --batch --import KEYS; \
 	mkdir -p /etc/apt/keyrings; \
-	gpg --batch --export --armor 'E58830201F7DD82CD808AA84160D26BB1785BA38' > /etc/apt/keyrings/mongodb.asc; \
+	gpg --batch --export --armor 'F5679A222C647C87527C2F8CB00A0BD1E2C63C11' > /etc/apt/keyrings/mongodb.asc; \
 	gpgconf --kill all; \
 	rm -rf "$GNUPGHOME" KEYS; \
 	\
@@ -85,12 +85,12 @@ ARG MONGO_PACKAGE=mongodb-org
 ARG MONGO_REPO=repo.mongodb.org
 ENV MONGO_PACKAGE=${MONGO_PACKAGE} MONGO_REPO=${MONGO_REPO}
 
-ENV MONGO_MAJOR 7.0
-RUN echo "deb [ signed-by=/etc/apt/keyrings/mongodb.asc ] http://$MONGO_REPO/apt/ubuntu jammy/${MONGO_PACKAGE%-unstable}/$MONGO_MAJOR multiverse" | tee "/etc/apt/sources.list.d/${MONGO_PACKAGE%-unstable}.list"
+ENV MONGO_MAJOR 5.0
+RUN echo "deb [ signed-by=/etc/apt/keyrings/mongodb.asc ] http://$MONGO_REPO/apt/ubuntu focal/${MONGO_PACKAGE%-unstable}/$MONGO_MAJOR multiverse" | tee "/etc/apt/sources.list.d/${MONGO_PACKAGE%-unstable}.list"
 
-# https://docs.mongodb.org/master/release-notes/7.0/
-ENV MONGO_VERSION 7.0.28
-# 12/16/2025, https://github.com/mongodb/mongo/tree/cfc346c59d2cc3dbc903507fc642e22e3097f362
+# https://docs.mongodb.org/master/release-notes/5.0/
+ENV MONGO_VERSION 5.0.32
+# 12/17/2025, https://github.com/mongodb/mongo/tree/ba92303e18e7ed4701572aa15acd161c97796f2f
 
 RUN set -x \
 # installing "mongodb-enterprise" pulls in "tzdata" which prompts for input
@@ -102,8 +102,6 @@ RUN set -x \
 		${MONGO_PACKAGE}-shell=$MONGO_VERSION \
 		${MONGO_PACKAGE}-mongos=$MONGO_VERSION \
 		${MONGO_PACKAGE}-tools=$MONGO_VERSION \
-		${MONGO_PACKAGE}-database=$MONGO_VERSION \
-		${MONGO_PACKAGE}-database-tools-extra=$MONGO_VERSION \
 	&& rm -rf /var/lib/apt/lists/* \
 	&& rm -rf /var/lib/mongodb \
 	&& mv /etc/mongod.conf /etc/mongod.conf.orig
diff --git a/mongo_7-jammy/docker-entrypoint.sh b/mongo_5.0-focal/docker-entrypoint.sh
similarity index 100%
copy from mongo_7-jammy/docker-entrypoint.sh
copy to mongo_5.0-focal/docker-entrypoint.sh
diff --git a/mongo_8.0-nanoserver-ltsc2022/Dockerfile b/mongo_5.0-nanoserver-ltsc2022/Dockerfile
similarity index 68%
copy from mongo_8.0-nanoserver-ltsc2022/Dockerfile
copy to mongo_5.0-nanoserver-ltsc2022/Dockerfile
index 3cd1004..4111bb6 100644
--- a/mongo_8.0-nanoserver-ltsc2022/Dockerfile
+++ b/mongo_5.0-nanoserver-ltsc2022/Dockerfile
@@ -14,19 +14,19 @@ RUN setx /m PATH "C:\mongodb\bin;%PATH%"
 USER ContainerUser
 # doing this first to share cache across versions more aggressively
 
-COPY --from=mongo:8.0.17-windowsservercore-ltsc2022 \
+COPY --from=mongo:5.0.32-windowsservercore-ltsc2022 \
 	C:\\Windows\\System32\\msvcp140.dll \
 	C:\\Windows\\System32\\msvcp140_1.dll \
 	C:\\Windows\\System32\\vcruntime140.dll \
 	C:\\Windows\\System32\\vcruntime140_1.dll \
 	C:\\Windows\\System32\\
 
-# https://docs.mongodb.org/master/release-notes/8.0/
-ENV MONGO_VERSION 8.0.17
-# 12/16/2025, https://github.com/mongodb/mongo/tree/b20e43625b72f4bb43cc15107f80ac966ae13b6d
+# https://docs.mongodb.org/master/release-notes/5.0/
+ENV MONGO_VERSION 5.0.32
+# 12/17/2025, https://github.com/mongodb/mongo/tree/ba92303e18e7ed4701572aa15acd161c97796f2f
 
-COPY --from=mongo:8.0.17-windowsservercore-ltsc2022 C:\\mongodb C:\\mongodb
-RUN mongod --version
+COPY --from=mongo:5.0.32-windowsservercore-ltsc2022 C:\\mongodb C:\\mongodb
+RUN mongo --version && mongod --version
 
 VOLUME C:\\data\\db C:\\data\\configdb
 
diff --git a/mongo_8.0-windowsservercore-ltsc2022/Dockerfile b/mongo_5.0-windowsservercore-ltsc2022/Dockerfile
similarity index 82%
copy from mongo_8.0-windowsservercore-ltsc2022/Dockerfile
copy to mongo_5.0-windowsservercore-ltsc2022/Dockerfile
index e326678..ab4c893 100644
--- a/mongo_8.0-windowsservercore-ltsc2022/Dockerfile
+++ b/mongo_5.0-windowsservercore-ltsc2022/Dockerfile
@@ -8,12 +8,12 @@ FROM mcr.microsoft.com/windows/servercore:ltsc2022
 
 SHELL ["powershell", "-Command", "$ErrorActionPreference = 'Stop';"]
 
-# https://docs.mongodb.org/master/release-notes/8.0/
-ENV MONGO_VERSION 8.0.17
-# 12/16/2025, https://github.com/mongodb/mongo/tree/b20e43625b72f4bb43cc15107f80ac966ae13b6d
+# https://docs.mongodb.org/master/release-notes/5.0/
+ENV MONGO_VERSION 5.0.32
+# 12/17/2025, https://github.com/mongodb/mongo/tree/ba92303e18e7ed4701572aa15acd161c97796f2f
 
-ENV MONGO_DOWNLOAD_URL https://fastdl.mongodb.org/windows/mongodb-windows-x86_64-8.0.17-signed.msi
-ENV MONGO_DOWNLOAD_SHA256=4481f5af2795a6a1d74f22bcb5f0e52eeead96ac993a45ccbc50107e4a38b489
+ENV MONGO_DOWNLOAD_URL https://fastdl.mongodb.org/windows/mongodb-windows-x86_64-5.0.32-signed.msi
+ENV MONGO_DOWNLOAD_SHA256=688b8e27d8614a44a8d5235fe3f63e1519c92ee0ce19fd8ad4af9ce39337e227
 
 RUN Write-Host ('Downloading {0} ...' -f $env:MONGO_DOWNLOAD_URL); \
 	[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; \
@@ -38,7 +38,7 @@ RUN Write-Host ('Downloading {0} ...' -f $env:MONGO_DOWNLOAD_URL); \
 			'/l*v', 'install.log', \
 # https://docs.mongodb.com/manual/tutorial/install-mongodb-on-windows-unattended/#run-the-windows-installer-from-the-windows-command-interpreter
 			'INSTALLLOCATION=C:\mongodb', \
-			'ADDLOCAL=MiscellaneousTools,Router,ServerNoService' \
+			'ADDLOCAL=Client,MiscellaneousTools,Router,ServerNoService' \
 		); \
 	if (-Not (Test-Path C:\mongodb\bin\mongod.exe -PathType Leaf)) { \
 		Write-Host 'Installer failed!'; \
@@ -51,6 +51,7 @@ RUN Write-Host ('Downloading {0} ...' -f $env:MONGO_DOWNLOAD_URL); \
 	[Environment]::SetEnvironmentVariable('PATH', $env:PATH, [EnvironmentVariableTarget]::Machine); \
 	\
 	Write-Host 'Verifying install ...'; \
+	Write-Host '  mongo --version'; mongo --version; \
 	Write-Host '  mongod --version'; mongod --version; \
 	\
 	Write-Host 'Removing ...'; \
diff --git a/mongo_windowsservercore-ltsc2025/Dockerfile b/mongo_5.0-windowsservercore-ltsc2025/Dockerfile
similarity index 82%
copy from mongo_windowsservercore-ltsc2025/Dockerfile
copy to mongo_5.0-windowsservercore-ltsc2025/Dockerfile
index 71e4058..394f581 100644
--- a/mongo_windowsservercore-ltsc2025/Dockerfile
+++ b/mongo_5.0-windowsservercore-ltsc2025/Dockerfile
@@ -8,12 +8,12 @@ FROM mcr.microsoft.com/windows/servercore:ltsc2025
 
 SHELL ["powershell", "-Command", "$ErrorActionPreference = 'Stop';"]
 
-# https://docs.mongodb.org/master/release-notes/8.2/
-ENV MONGO_VERSION 8.2.3
-# 12/15/2025, https://github.com/mongodb/mongo/tree/36f41c9c30a2f13f834d033ba03c3463c891fb01
+# https://docs.mongodb.org/master/release-notes/5.0/
+ENV MONGO_VERSION 5.0.32
+# 12/17/2025, https://github.com/mongodb/mongo/tree/ba92303e18e7ed4701572aa15acd161c97796f2f
 
-ENV MONGO_DOWNLOAD_URL https://fastdl.mongodb.org/windows/mongodb-windows-x86_64-8.2.3-signed.msi
-ENV MONGO_DOWNLOAD_SHA256=dbad91532fd5f5bb5b42818ce7a644dd603a388926303b306e23ef29a640e849
+ENV MONGO_DOWNLOAD_URL https://fastdl.mongodb.org/windows/mongodb-windows-x86_64-5.0.32-signed.msi
+ENV MONGO_DOWNLOAD_SHA256=688b8e27d8614a44a8d5235fe3f63e1519c92ee0ce19fd8ad4af9ce39337e227
 
 RUN Write-Host ('Downloading {0} ...' -f $env:MONGO_DOWNLOAD_URL); \
 	[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; \
@@ -38,7 +38,7 @@ RUN Write-Host ('Downloading {0} ...' -f $env:MONGO_DOWNLOAD_URL); \
 			'/l*v', 'install.log', \
 # https://docs.mongodb.com/manual/tutorial/install-mongodb-on-windows-unattended/#run-the-windows-installer-from-the-windows-command-interpreter
 			'INSTALLLOCATION=C:\mongodb', \
-			'ADDLOCAL=MiscellaneousTools,Router,ServerNoService' \
+			'ADDLOCAL=Client,MiscellaneousTools,Router,ServerNoService' \
 		); \
 	if (-Not (Test-Path C:\mongodb\bin\mongod.exe -PathType Leaf)) { \
 		Write-Host 'Installer failed!'; \
@@ -51,6 +51,7 @@ RUN Write-Host ('Downloading {0} ...' -f $env:MONGO_DOWNLOAD_URL); \
 	[Environment]::SetEnvironmentVariable('PATH', $env:PATH, [EnvironmentVariableTarget]::Machine); \
 	\
 	Write-Host 'Verifying install ...'; \
+	Write-Host '  mongo --version'; mongo --version; \
 	Write-Host '  mongod --version'; mongod --version; \
 	\
 	Write-Host 'Removing ...'; \
diff --git a/mongo_7-jammy/Dockerfile b/mongo_6-jammy/Dockerfile
similarity index 92%
copy from mongo_7-jammy/Dockerfile
copy to mongo_6-jammy/Dockerfile
index 63d4ee8..4f9ec2f 100644
--- a/mongo_7-jammy/Dockerfile
+++ b/mongo_6-jammy/Dockerfile
@@ -59,10 +59,10 @@ RUN set -eux; \
 	\
 # download/install MongoDB PGP keys
 	export GNUPGHOME="$(mktemp -d)"; \
-	wget -O KEYS 'https://pgp.mongodb.com/server-7.0.asc'; \
+	wget -O KEYS 'https://pgp.mongodb.com/server-6.0.asc'; \
 	gpg --batch --import KEYS; \
 	mkdir -p /etc/apt/keyrings; \
-	gpg --batch --export --armor 'E58830201F7DD82CD808AA84160D26BB1785BA38' > /etc/apt/keyrings/mongodb.asc; \
+	gpg --batch --export --armor '39BD841E4BE5FB195A65400E6A26B1AE64C3C388' > /etc/apt/keyrings/mongodb.asc; \
 	gpgconf --kill all; \
 	rm -rf "$GNUPGHOME" KEYS; \
 	\
@@ -85,12 +85,12 @@ ARG MONGO_PACKAGE=mongodb-org
 ARG MONGO_REPO=repo.mongodb.org
 ENV MONGO_PACKAGE=${MONGO_PACKAGE} MONGO_REPO=${MONGO_REPO}
 
-ENV MONGO_MAJOR 7.0
+ENV MONGO_MAJOR 6.0
 RUN echo "deb [ signed-by=/etc/apt/keyrings/mongodb.asc ] http://$MONGO_REPO/apt/ubuntu jammy/${MONGO_PACKAGE%-unstable}/$MONGO_MAJOR multiverse" | tee "/etc/apt/sources.list.d/${MONGO_PACKAGE%-unstable}.list"
 
-# https://docs.mongodb.org/master/release-notes/7.0/
-ENV MONGO_VERSION 7.0.28
-# 12/16/2025, https://github.com/mongodb/mongo/tree/cfc346c59d2cc3dbc903507fc642e22e3097f362
+# https://docs.mongodb.org/master/release-notes/6.0/
+ENV MONGO_VERSION 6.0.27
+# 12/18/2025, https://github.com/mongodb/mongo/tree/fc88ca137231d7457aed6265d4f32a361ae71716
 
 RUN set -x \
 # installing "mongodb-enterprise" pulls in "tzdata" which prompts for input
diff --git a/mongo_7-jammy/docker-entrypoint.sh b/mongo_6-jammy/docker-entrypoint.sh
similarity index 100%
copy from mongo_7-jammy/docker-entrypoint.sh
copy to mongo_6-jammy/docker-entrypoint.sh
diff --git a/mongo_8.0-nanoserver-ltsc2022/Dockerfile b/mongo_6-nanoserver-ltsc2022/Dockerfile
similarity index 72%
copy from mongo_8.0-nanoserver-ltsc2022/Dockerfile
copy to mongo_6-nanoserver-ltsc2022/Dockerfile
index 3cd1004..0a46233 100644
--- a/mongo_8.0-nanoserver-ltsc2022/Dockerfile
+++ b/mongo_6-nanoserver-ltsc2022/Dockerfile
@@ -14,18 +14,18 @@ RUN setx /m PATH "C:\mongodb\bin;%PATH%"
 USER ContainerUser
 # doing this first to share cache across versions more aggressively
 
-COPY --from=mongo:8.0.17-windowsservercore-ltsc2022 \
+COPY --from=mongo:6.0.27-windowsservercore-ltsc2022 \
 	C:\\Windows\\System32\\msvcp140.dll \
 	C:\\Windows\\System32\\msvcp140_1.dll \
 	C:\\Windows\\System32\\vcruntime140.dll \
 	C:\\Windows\\System32\\vcruntime140_1.dll \
 	C:\\Windows\\System32\\
 
-# https://docs.mongodb.org/master/release-notes/8.0/
-ENV MONGO_VERSION 8.0.17
-# 12/16/2025, https://github.com/mongodb/mongo/tree/b20e43625b72f4bb43cc15107f80ac966ae13b6d
+# https://docs.mongodb.org/master/release-notes/6.0/
+ENV MONGO_VERSION 6.0.27
+# 12/18/2025, https://github.com/mongodb/mongo/tree/fc88ca137231d7457aed6265d4f32a361ae71716
 
-COPY --from=mongo:8.0.17-windowsservercore-ltsc2022 C:\\mongodb C:\\mongodb
+COPY --from=mongo:6.0.27-windowsservercore-ltsc2022 C:\\mongodb C:\\mongodb
 RUN mongod --version
 
 VOLUME C:\\data\\db C:\\data\\configdb
diff --git a/mongo_8.0-windowsservercore-ltsc2022/Dockerfile b/mongo_6-windowsservercore-ltsc2022/Dockerfile
similarity index 87%
copy from mongo_8.0-windowsservercore-ltsc2022/Dockerfile
copy to mongo_6-windowsservercore-ltsc2022/Dockerfile
index e326678..0366c67 100644
--- a/mongo_8.0-windowsservercore-ltsc2022/Dockerfile
+++ b/mongo_6-windowsservercore-ltsc2022/Dockerfile
@@ -8,12 +8,12 @@ FROM mcr.microsoft.com/windows/servercore:ltsc2022
 
 SHELL ["powershell", "-Command", "$ErrorActionPreference = 'Stop';"]
 
-# https://docs.mongodb.org/master/release-notes/8.0/
-ENV MONGO_VERSION 8.0.17
-# 12/16/2025, https://github.com/mongodb/mongo/tree/b20e43625b72f4bb43cc15107f80ac966ae13b6d
+# https://docs.mongodb.org/master/release-notes/6.0/
+ENV MONGO_VERSION 6.0.27
+# 12/18/2025, https://github.com/mongodb/mongo/tree/fc88ca137231d7457aed6265d4f32a361ae71716
 
-ENV MONGO_DOWNLOAD_URL https://fastdl.mongodb.org/windows/mongodb-windows-x86_64-8.0.17-signed.msi
-ENV MONGO_DOWNLOAD_SHA256=4481f5af2795a6a1d74f22bcb5f0e52eeead96ac993a45ccbc50107e4a38b489
+ENV MONGO_DOWNLOAD_URL https://fastdl.mongodb.org/windows/mongodb-windows-x86_64-6.0.27-signed.msi
+ENV MONGO_DOWNLOAD_SHA256=7c070bb50f184ba20dc0a8e57f13ee9f00ee071fba5777e35b173ec1defc3bd4
 
 RUN Write-Host ('Downloading {0} ...' -f $env:MONGO_DOWNLOAD_URL); \
 	[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; \
diff --git a/mongo_windowsservercore-ltsc2025/Dockerfile b/mongo_6-windowsservercore-ltsc2025/Dockerfile
similarity index 87%
copy from mongo_windowsservercore-ltsc2025/Dockerfile
copy to mongo_6-windowsservercore-ltsc2025/Dockerfile
index 71e4058..9e785c9 100644
--- a/mongo_windowsservercore-ltsc2025/Dockerfile
+++ b/mongo_6-windowsservercore-ltsc2025/Dockerfile
@@ -8,12 +8,12 @@ FROM mcr.microsoft.com/windows/servercore:ltsc2025
 
 SHELL ["powershell", "-Command", "$ErrorActionPreference = 'Stop';"]
 
-# https://docs.mongodb.org/master/release-notes/8.2/
-ENV MONGO_VERSION 8.2.3
-# 12/15/2025, https://github.com/mongodb/mongo/tree/36f41c9c30a2f13f834d033ba03c3463c891fb01
+# https://docs.mongodb.org/master/release-notes/6.0/
+ENV MONGO_VERSION 6.0.27
+# 12/18/2025, https://github.com/mongodb/mongo/tree/fc88ca137231d7457aed6265d4f32a361ae71716
 
-ENV MONGO_DOWNLOAD_URL https://fastdl.mongodb.org/windows/mongodb-windows-x86_64-8.2.3-signed.msi
-ENV MONGO_DOWNLOAD_SHA256=dbad91532fd5f5bb5b42818ce7a644dd603a388926303b306e23ef29a640e849
+ENV MONGO_DOWNLOAD_URL https://fastdl.mongodb.org/windows/mongodb-windows-x86_64-6.0.27-signed.msi
+ENV MONGO_DOWNLOAD_SHA256=7c070bb50f184ba20dc0a8e57f13ee9f00ee071fba5777e35b173ec1defc3bd4
 
 RUN Write-Host ('Downloading {0} ...' -f $env:MONGO_DOWNLOAD_URL); \
 	[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; \

Relevant Maintainers:

mongo: @tianon @yosifkit

tianon · 2025-12-29T19:52:51Z

Invalid 'FROM' + 'Architectures' combinations detected:

mongo:4.4.30-focal (FROM ubuntu:focal) -- completely unsupported base!

mongo:5.0.32-focal (FROM ubuntu:focal) -- completely unsupported base!

Read https://github.com/docker-library/official-images#multiple-architectures for more details.

As noted in the OP, this CI failure is expected and a temporary state to get out EOL releases (where an EOL base image is probably the lesser of the two evils).

tianon requested review from a team and LaurentGoderre as code owners December 29, 2025 19:50

github-actions bot added the library/mongo label Dec 29, 2025

tianon mentioned this pull request Dec 29, 2025

Remove EOL versions again docker-library/mongo#745

Merged

tianon merged commit d552d76 into docker-library:master Dec 29, 2025
22 of 23 checks passed

tianon deleted the mongo branch December 29, 2025 20:02

tianon mentioned this pull request Dec 29, 2025

Update mongo #20568

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[security] Update mongo, esp. for CVE-2025-14847 #20567

[security] Update mongo, esp. for CVE-2025-14847 #20567

Uh oh!

tianon commented Dec 29, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Dec 29, 2025

Uh oh!

tianon commented Dec 29, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

[security] Update mongo, esp. for CVE-2025-14847 #20567

[security] Update mongo, esp. for CVE-2025-14847 #20567

Uh oh!

Conversation

tianon commented Dec 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Dec 29, 2025

Uh oh!

tianon commented Dec 29, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

tianon commented Dec 29, 2025 •

edited

Loading