Percona Server for MongoDB 7.0.32-18 (2026-05-07)¶
Installation Upgrade from MongoDB Community
Percona Server for MongoDB 7.0.32-18 is an enhanced, source-available, and highly-scalable database that is a fully-compatible, drop-in replacement for MongoDB Community Edition.
Percona Server for MongoDB 7.0.32-18 includes the improvements and bug fixes of:
It supports protocols and drivers of MongoDB Community 7.0.32.
Amazon Linux 2023 users
Percona Server for MongoDB 7.0.32-18 now requires OpenSSL 3.4.0 or higher. To ensure a successful installation or upgrade on Amazon Linux 2023, verify that your environment meets this minimum requirement.
- If your current system version is below 3.4.0, update the OpenSSL package or upgrade your operating system to a release that includes the required OpenSSL version.
- This version of Percona Server for MongoDB will not install or run correctly without OpenSSL 3.4.0+ available in the system path.
Release highlights¶
LDAP userToDNMapping cache¶
Starting with PSMDB 7.0.32-18, we have implemented caching of LDAP userToDNMapping to reduce the number of round-trips to the LDAP server during authentication and authorization. Caching is controlled by security.ldap.userToDNMapping (exposed as --ldapUserToDNMapping at startup and ldapUserToDNMapping at runtime).
The following server parameters control the cache:
-
ldapUserToDNCacheTTLSeconds: Specifies how long (in seconds) a cache entry remains valid.- Default:
30 - Set to
0to turn off caching.
- Default:
-
ldapUserToDNCacheSize: Defines the maximum number of entries stored in the cache.- Default:
10000 - Set to
0to turn off caching.
- Default:
For more information about this feature, refer to our documentation.
Changelog¶
New feature¶
- PSMDB-2003: We have implemented caching of LDAP userToDNMapping to reduce the number of round-trips to the LDAP server during authentication and authorization. Caching is controlled by
security.ldap.userToDNMapping(exposed as--ldapUserToDNMappingat startup andldapUserToDNMappingat runtime).
Security updates: CVE fixes from upstream MongoDB¶
This release includes upstream MongoDB security fixes for the following vulnerabilities:
High severity¶
- SERVER-119981 (CVE-2026-6914): Fixed an issue where computing the MD5 checksum of a specifically malformed
BSONobject under certain conditions could cause the MongoDB server to crash, resulting in temporary loss of availability.
Medium severity¶
- SERVER-119679 (CVE-2026-6915): Resolved an issue where an authorization flaw in the user management command allowed authenticated users to make limited changes to authentication-related data associated with another user’s account. This issue could potentially affect how authentication was performed for the impacted account.
Affected versions¶
These vulnerabilities affect the following versions of MongoDB Community Edition and Percona Server for MongoDB:
- All Percona Server for MongoDB 7.0.x versions
- MongoDB Community 7.0 versions prior to 7.0.32
Security fixes: CVEs addressed in Percona Server for MongoDB Docker images¶
We have identified and fixed the following security vulnerabilities (CVEs) in the Percona Server for MongoDB Docker images . These issues have been addressed and are resolved in the latest release.
Tools packaged with this release¶
Percona Server for MongoDB packages the following MongoDB tools:
- MongoDB Shell (mongosh): 2.8.2 — upstream release notes