From d8387212ac3f8cd6ce4185dca7fac4136ce13489 Mon Sep 17 00:00:00 2001 From: Anastasia Alexadrova Date: Thu, 21 Nov 2024 11:47:49 +0100 Subject: [PATCH 1/5] PSMDB-1559 Release notes 7.0.15-9 new file: docs/release_notes/7.0.15-9.md modified: docs/release_notes/index.md modified: mkdocs-base.yml modified: variables.yml --- docs/release_notes/7.0.15-9.md | 44 ++++++++++++++++++++++++++++++++++ docs/release_notes/index.md | 2 ++ mkdocs-base.yml | 3 ++- variables.yml | 5 ++-- 4 files changed, 51 insertions(+), 3 deletions(-) create mode 100644 docs/release_notes/7.0.15-9.md diff --git a/docs/release_notes/7.0.15-9.md b/docs/release_notes/7.0.15-9.md new file mode 100644 index 000000000..82af87919 --- /dev/null +++ b/docs/release_notes/7.0.15-9.md @@ -0,0 +1,44 @@ +# Percona Server for MongoDB 7.0.15-9 ({{date.7_0_15}}) + +[Installation](../install/index.md){.md-button} + +Percona Server for MongoDB 7.0.15-9 is an enhanced, source-available, and highly-scalable database that is a +fully-compatible, drop-in replacement for MongoDB Community Edition. + +Percona Server for MongoDB 7.0.15-9 includes the improvements and bug fixes of [MongoDB 7.0.15 Community Edition](https://www.mongodb.com/docs/manual/release-notes/7.0/#7.0.15---oct-24--2024) and supports its protocols and drivers. + +## Release Highlights + +!!! important + + This release of Percona Server for MongoDB includes a fix for a security vulnerability [CVE-2024-10921](https://nvd.nist.gov/vuln/detail/CVE-2024-10921). This vulnerability allowed an authorized user to trigger server crashes or receive the contents of the buffer over-reads of the server memory by sending specially crafted requests that constructed malfolmed BSON in MongoDB. The issue is fixed upstream in versions 6.0.18 and 7.0.15. The fix is also included in Percona Server for MongoDB 6.0.18-16 and 7.0.15-9. + + Users running any minor version of Percona Server for MongoDB 6.0.x before 6.0.18 and Percona Server for MongoDB 7.0.x before 7.0.15 should upgrade to Percona Server for MongoDB 6.0.18-16 and 7.0.15-9, respectively, as soon as possible. + +This release provides the following features and improvements: + +### Prevent master encryption key loss on the Vault server + +Before Percona Server for MongoDB puts a new master encryption key to the Vault server as the versioned secret, it now checks if the secret's version reached the defined maximum (10 by default). This prevents the loss of the old secret and the master encryption key it stores on the Vault server. + +Make sure Percona Server for MongoDB has read permissions for the secret's metadata and the secrets engine configuration. To learn more, refer to the [documentation](../vault.md#master-key-loss-prevention). + +### Upstream Improvements + +The bug fixes, provided by MongoDB and included in Percona Server for MongoDB, are the following: + +* [SERVER-96419](https://jira.mongodb.org/browse/SERVER-96419) - Fixed the issue with improper neutralization of null bytes that may have led to buffer over-reads in MongoDB Server +* [SERVER-95279](https://jira.mongodb.org/browse/SERVER-95279) - Use a new C++ type for BSON field names to ensure validity + +Find the full list of changes in the [MongoDB 7.0.15 Community Edition release notes](https://www.mongodb.com/docs/manual/release-notes/7.0/#7.0.15---oct-24--2024). + +## Changelog + +### Improvements + +* [PSMDB-1441](https://perconadev.atlassian.net/browse/PSMDB-1441) - Fixed the issue with master encryption keys getting lost when the number of created secrets exceeds the threshold by preventing a new secret creation and alerting users about it. +* [PSMDB-1539](https://perconadev.atlassian.net/browse/PSMDB-1539) - Removed the fork:true and pidfile management to simplify migration + +### Fixed Bugs + +* [PSMDB-1527](https://perconadev.atlassian.net/browse/PSMDB-1527) - Improve the `activateKeys` option handling by changing its type to boolean. diff --git a/docs/release_notes/index.md b/docs/release_notes/index.md index 0432cb25d..02f6b6e4b 100644 --- a/docs/release_notes/index.md +++ b/docs/release_notes/index.md @@ -1,6 +1,8 @@ # Percona Server for MongoDB 7.0 release notes +* [Percona Server for MongoDB 7.0.15-9 ({{date.7_0_15}})](7.0.15-9.md) + * [Percona Server for MongoDB 7.0.14-8 ({{date.7_0_14}})](7.0.14-8.md) * [Percona Server for MongoDB 7.0.12-7 (2024-07-23)](7.0.12-7.md) diff --git a/mkdocs-base.yml b/mkdocs-base.yml index a44b87c8a..4e81f5bbb 100644 --- a/mkdocs-base.yml +++ b/mkdocs-base.yml @@ -138,7 +138,7 @@ plugins: with-pdf: # https://github.com/orzih/mkdocs-with-pdf output_path: '_pdf/PerconaServerforMongoDB-7.0.pdf' cover_title: 'Server for MongoDB Documentation 7.0' - cover_subtitle: 7.0.14-8 (September 23, 2024) + cover_subtitle: 7.0.15-9 (November 27, 2024) author: 'Percona Technical Documentation Team' cover_logo: docs/_images/Percona_Logo_Color.png debug_html: false @@ -209,6 +209,7 @@ nav: - install/uninstall.md - Release notes: - "Release notes index": "release_notes/index.md" + - release_notes/7.0.15-9.md - release_notes/7.0.14-8.md - release_notes/7.0.12-7.md - release_notes/7.0.11-6.md diff --git a/variables.yml b/variables.yml index f7abec3c4..629df1ecd 100644 --- a/variables.yml +++ b/variables.yml @@ -2,10 +2,11 @@ # See also mkdocs.yml plugins.with-pdf.cover_subtitle and output_path -release: '7.0.14-8' +release: '7.0.15-9' version: '7.0' -mongosh: '2.2.10' +mongosh: '2.3.2024-09-23' date: 7_0_14: '2024-09-23' + 7_0_15: '2024-11-27' From 8ab979932b675e698d7912414f1eacf54b2c1f9c Mon Sep 17 00:00:00 2001 From: Anastasia Alexadrova Date: Thu, 21 Nov 2024 20:43:17 +0100 Subject: [PATCH 2/5] Updated after the review --- docs/release_notes/7.0.15-9.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/docs/release_notes/7.0.15-9.md b/docs/release_notes/7.0.15-9.md index 82af87919..d63466dd5 100644 --- a/docs/release_notes/7.0.15-9.md +++ b/docs/release_notes/7.0.15-9.md @@ -1,6 +1,7 @@ # Percona Server for MongoDB 7.0.15-9 ({{date.7_0_15}}) [Installation](../install/index.md){.md-button} +[Upgrade from MongoDB Community](../install/upgrade-from-mongodb.md){.md-button} Percona Server for MongoDB 7.0.15-9 is an enhanced, source-available, and highly-scalable database that is a fully-compatible, drop-in replacement for MongoDB Community Edition. @@ -11,9 +12,9 @@ Percona Server for MongoDB 7.0.15-9 includes the improvements and bug fixes of [ !!! important - This release of Percona Server for MongoDB includes a fix for a security vulnerability [CVE-2024-10921](https://nvd.nist.gov/vuln/detail/CVE-2024-10921). This vulnerability allowed an authorized user to trigger server crashes or receive the contents of the buffer over-reads of the server memory by sending specially crafted requests that constructed malfolmed BSON in MongoDB. The issue is fixed upstream in versions 6.0.18 and 7.0.15. The fix is also included in Percona Server for MongoDB 6.0.18-16 and 7.0.15-9. + This release of Percona Server for MongoDB includes a fix for a security vulnerability [CVE-2024-10921](https://nvd.nist.gov/vuln/detail/CVE-2024-10921). This vulnerability allowed an authorized user to trigger server crashes or receive the contents of the buffer over-reads of the server memory by sending specially crafted requests that constructed malformed BSON in MongoDB. he issue is fixed and included in Percona Server for MongoDB 7.0.15-9. - Users running any minor version of Percona Server for MongoDB 6.0.x before 6.0.18 and Percona Server for MongoDB 7.0.x before 7.0.15 should upgrade to Percona Server for MongoDB 6.0.18-16 and 7.0.15-9, respectively, as soon as possible. + Users running any minor version of Percona Server for MongoDB 7.0.x before 7.0.15 should upgrade to this latest version as soon as possible. This release provides the following features and improvements: From 0bd04142b9e2a8b7dc9c11be39c66a0dad9f11ca Mon Sep 17 00:00:00 2001 From: Anastasia Alexadrova Date: Mon, 25 Nov 2024 14:02:03 +0100 Subject: [PATCH 3/5] Removed issue about pid file management from changelog --- docs/release_notes/7.0.15-9.md | 1 - 1 file changed, 1 deletion(-) diff --git a/docs/release_notes/7.0.15-9.md b/docs/release_notes/7.0.15-9.md index d63466dd5..8594a2551 100644 --- a/docs/release_notes/7.0.15-9.md +++ b/docs/release_notes/7.0.15-9.md @@ -38,7 +38,6 @@ Find the full list of changes in the [MongoDB 7.0.15 Community Edition release n ### Improvements * [PSMDB-1441](https://perconadev.atlassian.net/browse/PSMDB-1441) - Fixed the issue with master encryption keys getting lost when the number of created secrets exceeds the threshold by preventing a new secret creation and alerting users about it. -* [PSMDB-1539](https://perconadev.atlassian.net/browse/PSMDB-1539) - Removed the fork:true and pidfile management to simplify migration ### Fixed Bugs From 8e2b03239a9fc59e61952c6f22864fc13a48e702 Mon Sep 17 00:00:00 2001 From: Anastasia Alexandrova Date: Mon, 25 Nov 2024 20:23:38 +0100 Subject: [PATCH 4/5] Update variables.yml Co-authored-by: Sandra Romanchenko <53295797+sandraromanchenko@users.noreply.github.com> --- variables.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/variables.yml b/variables.yml index 629df1ecd..1026a6b19 100644 --- a/variables.yml +++ b/variables.yml @@ -4,7 +4,7 @@ release: '7.0.15-9' version: '7.0' -mongosh: '2.3.2024-09-23' +mongosh: '2.3.2' date: From 1943b455ad16a05815bdfcf023cb30ce02522ab3 Mon Sep 17 00:00:00 2001 From: Anastasia Alexandrova Date: Mon, 25 Nov 2024 20:23:45 +0100 Subject: [PATCH 5/5] Update docs/release_notes/7.0.15-9.md Co-authored-by: Sandra Romanchenko <53295797+sandraromanchenko@users.noreply.github.com> --- docs/release_notes/7.0.15-9.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/release_notes/7.0.15-9.md b/docs/release_notes/7.0.15-9.md index 8594a2551..5d2476a15 100644 --- a/docs/release_notes/7.0.15-9.md +++ b/docs/release_notes/7.0.15-9.md @@ -12,7 +12,7 @@ Percona Server for MongoDB 7.0.15-9 includes the improvements and bug fixes of [ !!! important - This release of Percona Server for MongoDB includes a fix for a security vulnerability [CVE-2024-10921](https://nvd.nist.gov/vuln/detail/CVE-2024-10921). This vulnerability allowed an authorized user to trigger server crashes or receive the contents of the buffer over-reads of the server memory by sending specially crafted requests that constructed malformed BSON in MongoDB. he issue is fixed and included in Percona Server for MongoDB 7.0.15-9. + This release of Percona Server for MongoDB includes a fix for a security vulnerability [CVE-2024-10921](https://nvd.nist.gov/vuln/detail/CVE-2024-10921). This vulnerability allowed an authorized user to trigger server crashes or receive the contents of the buffer over-reads of the server memory by sending specially crafted requests that constructed malformed BSON in MongoDB. The issue is fixed and included in Percona Server for MongoDB 7.0.15-9. Users running any minor version of Percona Server for MongoDB 7.0.x before 7.0.15 should upgrade to this latest version as soon as possible.