Percona Server for MongoDB 8.0.34-15 (2026-10-22)¶
Installation Upgrade from MongoDB Community
We are pleased to announce Percona Server for MongoDB 8.0.34-15, the drop-in replacement for MongoDB Community Edition. Percona Server for MongoDB supports MongoDB Community protocols and drivers and enhances it with enterprise-grade features for free, helping you meet your organization’s requirements for high availability, reliability, and data security.
Percona Server for MongoDB 8.0.34-15 includes the improvements and bug fixes of:
-
Supports protocols and drivers of MongoDB Community 8.0.34.
Important
Percona Server for MongoDB 8.0.34-15 contains fixes for:
You can find details at the bottom of this page.
Release highlights¶
MongoDB Database Tools are distributed as a separate tarball¶
Starting with this release, MongoDB Database Tools (mongodump, mongorestore, mongoexport, mongoimport, and others) are no longer included in the Percona Server for MongoDB binary tarball. If you install Percona Server for MongoDB from tarballs, download the MongoDB Database Tools tarball separately from the Percona Downloads website.
This change aligns the distribution of MongoDB Database Tools with how MongoDB Shell (mongosh) is already distributed. It also allows us to deliver tool updates, including security fixes, independently of the server releases.
If you install Percona Server for MongoDB from RPM or DEB packages, nothing changes for you: MongoDB Database Tools are installed as before.
Upgrade recommendation¶
We recommend upgrading to version 8.0.34-15 to benefit from the backup and checkpoint fixes included in MongoDB 8.0.34.
Changelog¶
Improvement¶
-
PSMDB-1944: MongoDB Database Tools packages are now built independently of Percona Server for MongoDB packages. This allows tool updates, including security fixes, to be prepared without rebuilding the server packages.
-
PSMDB-2182: Improved telemetry for x.509 certificate authentication. x.509 is used by default for internal authentication between members of replica sets and sharded clusters, so telemetry previously reported it as enabled on almost every instance. Telemetry now reports x.509 usage for client authentication separately from its use for internal cluster authentication.
Bugs fixed¶
- PSMDB-2126: Fixed an issue where streaming a backup to Google Cloud Storage through its S3-compatible API failed. The issue was caused by the upgrade of the AWS SDK for C++ to version 1.11.471, which added empty checksum elements to multipart upload requests that Google Cloud Storage rejects.
Improvements and bug fixes from upstream MongoDB¶
This release includes the following changes listed in the MongoDB 8.0.34 patch release notes .
Bugs fixed¶
-
SERVER-132946 : Heap-use-after-free in $_internalApplyOplogUpdate stage when reading via getMore after aggregate Invocation is destroyed
-
SERVER-134618 : Fix serialization of constant values in $bucket stage
-
SERVER-131412 : Improve Validation Expression
-
SERVER-98105 : Fixed an issue that could occur when a backup ran at the same time as a drop operation. Cleanup of storage files pending deletion now pauses until the backup cursor closes.
-
WT-18353 : Fixed an issue that could cause repeated server crashes during checkpoints when incremental backup was configured and a modified file’s metadata lacked the
checkpoint_backup_infofield. The issue affected files whose metadata predated the introduction of this field.
Security fixes from upstream MongoDB¶
The severity categories below follow CVSS scores version 4.0.
High severity¶
- SERVER-131412 (CVE-2026-104004 ): MongoDB Server’s collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop running when a document is later inserted. The behavior can occur for authenticated users with write access.
Medium severity¶
-
SERVER-132946 (CVE-2026-96297 ): A use-after-free issue in the
$_internalApplyOplogUpdateaggregation stage could expose unrelated data from server memory in query results. An authenticated user with read privileges could trigger the issue by combining the stage with a batch size of0. The server process could also terminate unexpectedly. -
SERVER-134618 (CVE-2026-103965 ): An issue in the
$bucketaggregation stage could cause constant values to be interpreted as field references during internal query rewriting. Under certain conditions, an authenticated user with read access could receive field values that the query did not intend to return.
For the complete upstream changelog, see MongoDB 8.0.34 Community Edition .
Tools packaged with this release¶
This release includes the following tools:
| Tool | Base version | Release notes |
|---|---|---|
MongoDB Shell (mongosh) |
2.13.0 | upstream release notes |
| Mongo Tools | 100.19.1 | upstream release notes |