Evergreen security release: 3.14.12, 3.15.12, 3.16.6, 3.17-beta2

The Evergreen Project has issued the following security releases;

• 3.14.12
• 3.15.12
• 3.16.6
• 3.17-beta2

These fix vulnerabilities that allow remote exfiltration of the contents of the database and the remote execution of arbitrary SQL and stored procedures in the Evergreen database.

These releases are available on the downloads page.

We strongly recommend immediate installation of this security release.

The two security bugs fixed in this release are:

• Bug 2004058
• Bug 2147196

These bugs will be made publicly visible over the next few days.

If you are running a version of Evergreen earlier than 3.14, please consult with your service provider or review the fixes in Git to update your system.

We would like to thank the individual who reported bug 2147196.