Skip to content

Percona Server for MongoDB 7.0.24-13 (2025-09-11)

Installation Upgrade from MongoDB Community

Percona Server for MongoDB 7.0.24-13 is an enhanced, source-available, and highly-scalable database that is a fully-compatible, drop-in replacement for MongoDB Community Edition.

Percona Server for MongoDB 7.0.24-13 includes the improvements and bug fixes of MongoDB 7.0.23 Community Edition and MongoDB 7.0.24 Community Edition. It supports protocols and drivers of both MongoDB Community 7.0.23 and MongoDB Community 7.0.24.

Release highlights

This release provides the following features and improvements:

Enhance authentication security via a token-based authentication flow with OpenID Connect (OIDC)

Percona Server for MongoDB now supports OpenID Connect (OIDC) / OAuth 2.0, providing a secure and simple way to manage user authentication using identity and access tokens. This feature allows you to centralize user management with a single identity provider, enhance security by eliminating the need to store credentials in your database and reduce the risk of credential theft. You can leverage enhanced authentication techniques like Single Sign-On (SSO) and Multi-Factor Authentication (MFA), improving your overall security posture and user experience.

Learn more about OIDC connect in our documentation

This feature is available in Percona Server for MongoDB Pro out of the box. You can also receive it by building Percona Server from the source code.

No vendor lock-in with OpenBao support for data-at-rest encryption

To give you more flexibility for enterprise-grade data encryption, Percona Server for MongoDB now supports OpenBao in addition to HashiCorp Vault. OpenBao is the open-source fork of Vault, providing the same powerful security while helping you avoid vendor lock-in.

This enhancement reflects our commitment to giving you more control over your security architecture while maintaining the reliability and performance you expect from Percona.

For guidance on configuring OpenBao, check our documentation.

Upstream Improvements

The bug fixes, provided by MongoDB Community and included in Percona Server for MongoDB, are the following:

  • SERVER-81797 - Implemented own portable API calls for atomic notify and wait operations with timeout functionality. This change improves the underlying core functionality of MongoDB.

  • SERVER-86656 - Created a reader-optimized reader-writer mutex

  • SERVER-95324 - Deprecated and removed the chunkMigrationConcurrency parameter to prevent excessive resource consumption and simplify data management

  • SERVER-101581 - Improved connection handling behavior by checking the socket state as a part of acceptConnection stage and discard it if it is already closed

  • SERVER-103741 - Added new metrics to provide better insight into database profile collection activity.

  • WT-14391 - Prevented potential data corruption by adding eviction requirements checks before accessing internal data stores.

  • SERVER-104771 - Fixed the issue with initial sync failing when the source has TTL indexes on a capped collection by allowing it from nodes with such indexes.

  • WT-14653 - Added reconciliation stats for tracking history store updates

  • SERVER-103505 - Prevented crashes that could occur when internal table information was unexpectedly missing.

Find the full list of changes in the release notes for:

Changelog

New Features

  • PSMDB-1438 - Add the ability to authenticate users using OpenID Connect (OIDC)

Improvements

  • PSMDB-1781 - Adjusted telemetry to report OpenBao and HashiCorp Vault usage separately

Fixed Bugs

  • PSMDB-1155 - Fixed an issue with Percona Server for MongoDB being stuck on attempt to open backupCursorExtend for a standalone instance by reporting an error about this operation as not allowed.

  • PSMDB-1745 - Aligned the audit log rotation behavior when the server is started with the reopen behavior so that on startup the server keeps writing events to the same log file.

  • PSMDB-1754 - Fixed the issue with log rotation behavior that was caused by replacing the rotated audit log file with a timestamp if it existed. The fix is to reopen a current audit log file in the append mode and write events there.

  • PSMDB-1757 - Prevented file copy-based initial sync if the storage engine is not WiredTiger