MongoDB 8.3.7 is released

MongoDB 8.3.7 is out and is ready for production deployment. This release is a recommended upgrade for all 8.3 users.

Fixed in this release:

  • SERVER-123081 Handle compound wildcard index spec in $_internalIndexKey
  • SERVER-124355 Improve memory checks for array expressions to prevent huge in-memory arrays from $concatArrays combined with $range
  • SERVER-125872 Fix exponential hashing of query solutions for InternalSchema*MatchExpression nodes
  • SERVER-126247 Properly validate $search.mergingPipeline as an internal-only field
  • SERVER-127280 Reject expression-based sortBy in the $linearFill parser
  • SERVER-127357 Check for duplicate from fields in DocumentSourceGraphLookup::createFromBson()
  • SERVER-127566 Limit the contention factor that can be used for FLE2 fields
  • SERVER-127661 Require autocommit when startOrContinueTransaction is specified
  • SERVER-127689 Only allow internal clients to specify $_internalPredicate
  • SERVER-127694 Add type checking for DBPointer
  • SERVER-127737 Limit the number of metadata blocks allowed in a FLE2IndexedTextEncryptedValue
  • SERVER-127831 Forbid external users from running FLE2 commands with crudProcessed set to true
  • SERVER-128198 Fix mongos killCursors to check authorization against the cursor’s namespace instead of the request namespace
  • SERVER-128316 Bound the maximum typo suggestion in hybrid search
  • SERVER-128341 Fix a server crash caused by sorting on a $meta expression
  • SERVER-128362 Add a null check on the return value in ocspClientCallback
  • SERVER-128387 Remove auth role parsing from SSL TLVs in the proxy protocol parser
  • SERVER-128433 Prevent external clients from setting runtimeConstants.userRoles
  • SERVER-128473 Fix a use-after-free in $function caused by a missing advanceGeneration() call on retained BSON arguments
  • SERVER-128494 Validate external BSON in MultiBsonStreamCursor
  • SERVER-128517 Add a configurable minimum timeout for pre-auth streamable hello to prevent a hot loop from very small maxAwaitTimeMS values
  • SERVER-128584 Add memory checks for $convert from BinData to an array
  • SERVER-128832 Guard ImplScope ModuleLoader creation
  • SERVER-79980 Support TLS 1.3 for Windows
  • SERVER-83322 Compound Wildcard Index bounds reverts to [MinKey, MaxKey] when filter contains fields outside CWI
  • SERVER-108215 Impose limits on the number of active multi-document transactions
  • SERVER-127346 Make session refresh have kExempt admission priority

8.3 Release Notes | All Issues | Community Download


As always, please let us know of any issues.

-- The MongoDB Team