MongoDB 8.3.8 is released

MongoDB 8.3.8 is out and is ready for production deployment. This release contains only fixes since 8.3.7, and is a recommended upgrade for all 8.3 users.

Fixed in this release:

  • SERVER-123864 Improve $lookup local-read fallback in sharded_agg_helpers
  • SERVER-127863 Enforce authenticationMechanisms on the SASL MONGODB-X509 path
  • SERVER-128392 Duplicate insert into a clustered collection whose _id contains a Decimal128 throws a KeyString format error
  • SERVER-128482 Disallow $documents with $_resumeAfter or $_startAt
  • SERVER-128551 Fix initialization order of $unwind in $graphLookup
  • SERVER-129460 Ensure valid jsonSchema in time series updates
  • SERVER-129617 Better validation for NaN in $percentile and $median
  • SERVER-129618 Disallow user-provided $vectorSearch arguments from overriding internally generated options
  • SERVER-129887 Fix a collision in bucket OIDs during bucket allocation that leaves a dangling pointer to the bucket
  • SERVER-129936 Tighten validation of $idLookup internal fields
  • SERVER-129994 Fix a malformed FlatBSON store caused by inserting duplicate field names
  • SERVER-130110 Gate the internal-only _internalSetObjToThis field of $function behind an internal-client check
  • SERVER-130111 Prevent invalid type conversion during match expression serialization
  • SERVER-130117 Fix a heap use-after-free in collection validation for big polygons
  • SERVER-130139 Account for the o-versus-UUID consistency check
  • SERVER-130167 Stop the JavaScript scope from constructing delete requests by concatenating unsanitized _id fields
  • SERVER-130188 Exclude partial indexes from 2dsphere geometry skip-validation
  • SERVER-130198 Increase the authorization requirement for slowms and sampleRate in the profile command
  • SERVER-130247 Treat Decimal128 values as potentially invalid when preparing to yield or detach a cursor
  • SERVER-130264 Apply the intra-cluster SASL mechanism allowlist in egress connection setup
  • SERVER-130266 Prohibit $text and $near in $_internalSchemaCond
  • SERVER-130481 Allow the symbol type in CommandHelpers::parseNsFromCommand
  • SERVER-130544 Enforce the internal user for commitTransaction and abortTransaction on prepared transactions
  • SERVER-130628 Prevent excessive range padding insertions into the ESC during FLE2 compaction
  • SERVER-130633 Authorize compactStructuredEncryptionData and cleanupStructuredEncryptionData at database scope

8.3 Release Notes | All Issues | Community Download

As always, please let us know of any issues.

– The MongoDB Team