CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

databases/mongodb707.0.45

MongoDB Community Edition (7.0.x Branch)

Maintainer
ronald@FreeBSD.org
Packages
mongodb70 7.0.45
Upstream
Higher version available: 9.0.4
CPE
mongodb:mongodb from the port
WWW
https://www.mongodb.com/docs/v7.0/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (25)

VuXML entries whose affected range this version has left.

Commits (97)

Ronald Klop (ronald) · 7.0.16_2
databases/mongodb[78]0: use internal pcre2 code

Fails to build with future update of PCRE2 10.45-RC1.

PR:	283694
Reported by:	diizzy@ (Daniel Engberg)
193f8fc2b4
Ronald Klop (ronald) · 7.0.16_1
databases/mongodb[67]0: forgot to commit a patch

Fixes:	38836ff12d "databases/mongodb60: fix build with llvm19"
Fixes:	895b2a5c0485 "databases/mongodb70: fix build with llvm19"
3ab18c284b
Ronald Klop (ronald) · 7.0.16_1
databases/mongodb70: fix build with llvm19

Build with clang from base.
Uses 2 public patches. Documentation is in the patches themselves.
895b2a5c04
Ronald Klop (ronald) · 7.0.16
databases/mongodb70: 7.0.16

Changes:
https://www.mongodb.com/docs/manual/release-notes/7.0/#patch-releases
f90c566136
Ronald Klop (ronald) · 7.0.15
databases/mongodb[67]0: remove unused patch for get-sources.sh

The file is not used. We fetch the mozjs source via the ports Makefile.
This brings mongodb60 and mongodb70 more in line with mongodb80.
2a81eb4e43
Ronald Klop (ronald) · 7.0.15
databases/mongodb80: patch is not necessary anymore

The same flag was set upstream in

branch v7.0: (a few days after I committed the patch)
https://github.com/mongodb/mongo/commit/7a0dcfa565aba4aaef159bf09cfaf2269678eb6c

master (which became 8.0):
https://github.com/mongodb/mongo/commit/ad8a74f5782fb8b3f24f74305c44da725732616a
addb8dafff
Ronald Klop (ronald) · 7.0.15
databases/mongodb70: update to 7.0.15

changes:
https://www.mongodb.com/docs/manual/release-notes/7.0/#7.0.15---oct-24--2024

Security:	CVE-2024-10921
693539a504
Ronald Klop (ronald) · 7.0.14_2
databases/mongodb[78]0: fix build with NOAVX enabled

Thanks to Yuri and Borja who helped creating patches and tested.

PR:	282471
f806050016
Ronald Klop (ronald) · 7.0.14_1
databases/mongodb[78]0: NOAVX is broken

Disable NOAVX as default until further investigation.

ld.lld: error: undefined symbol: mozilla::sse_private::avx2_enabled
>>> referenced by SSE.h:324 (src/third_party/mozjs/include/mozilla/SSE.h:324)
>>>               extract/mozglue/misc/SIMD.o:(mozilla::SupportsAVX2()) in archive build/opt/third_party/mozjs/libmozjs.a
>>> referenced by SSE.h:324 (src/third_party/mozjs/include/mozilla/SSE.h:324)
>>>               extract/mozglue/misc/SIMD.o:(mozilla::SIMD::memchr8(char const*, char, unsigned long)) in archive build/opt/third_party/mozjs/libmozjs.a
>>> referenced by SSE.h:324 (src/third_party/mozjs/include/mozilla/SSE.h:324)
>>>               extract/mozglue/misc/SIMD.o:(mozilla::SIMD::memchr16(char16_t const*, char16_t, unsigned long)) in archive build/opt/third_party/mozjs/libmozjs.a
>>> referenced 1 more times

ld.lld: error: undefined symbol: mozilla::SIMD::memchr8AVX2(char const*, char, unsigned long)
>>> referenced by SIMD.cpp:463 (src/third_party/mozjs/extract/mozglue/misc/SIMD.cpp:463)
>>>               extract/mozglue/misc/SIMD.o:(mozilla::SIMD::memchr8(char const*, char, unsigned long)) in archive build/opt/third_party/mozjs/libmozjs.a

ld.lld: error: undefined symbol: mozilla::SIMD::memchr16AVX2(char16_t const*, char16_t, unsigned long)
>>> referenced by SIMD.cpp:476 (src/third_party/mozjs/extract/mozglue/misc/SIMD.cpp:476)
>>>               extract/mozglue/misc/SIMD.o:(mozilla::SIMD::memchr16(char16_t const*, char16_t, unsigned long)) in archive build/opt/third_party/mozjs/libmozjs.a

ld.lld: error: undefined symbol: mozilla::SIMD::memchr64AVX2(unsigned long const*, unsigned long, unsigned long)
>>> referenced by SIMD.cpp:484 (src/third_party/mozjs/extract/mozglue/misc/SIMD.cpp:484)
>>>               extract/mozglue/misc/SIMD.o:(mozilla::SIMD::memchr64(unsigned long const*, unsigned long, unsigned long)) in archive build/opt/third_party/mozjs/libmozjs.a
c++: error: linker command failed with exit code 1 (use -v to see invocation)

PR:	282471
a3bd39f874
Ronald Klop (ronald) · 7.0.14_1
databases/mongodb[78]0: fix NOAVX option

bump portrevision as it did build but generated broken executables
piggyback a small portlint pacifier

PR:	282471
2dbe4cb866
Ronald Klop (ronald) · 7.0.14
databases/mongodb70: unbreak on 15 + llvm 19.1.2

stick to <= llvm18 on FreeBSD 15

fixes:
In file included from src/third_party/mozjs/platform/x86_64/freebsd/build/Unified_cpp_js_src4.cpp:20:
In file included from src/third_party/mozjs/extract/js/src/jsapi.cpp:42:
In file included from src/third_party/mozjs/extract/js/src/gc/PublicIterators.h:17:
In file included from src/third_party/mozjs/extract/js/src/gc/Zone.h:33:
In file included from src/third_party/mozjs/extract/js/src/vm/JSScript.h:41:
In file included from src/third_party/mozjs/extract/js/src/vm/SharedImmutableStringsCache.h:22:
src/third_party/mozjs/extract/js/src/threading/ExclusiveData.h:113:29: error: reference to non-static member function must be called
  113 |       : lock_(std::move(rhs.lock)), value_(std::move(rhs.value_)) {
      |                         ~~~~^~~~
1 error generated.
812019cddd
Ronald Klop (ronald) · 7.0.14
databases/mongodb70: update to 7.0.14

Changes:
https://www.mongodb.com/docs/manual/release-notes/7.0/#7.0.14---aug-26--2024

NB: 7.0.13 was tagged, but never released.

Sync with improvements in mongodb80:
from commit b44fe228ca :
Removed SSL from OPTIONS. It was inherited from the first versions
of databases/mongodb, long before I became maintainer.
Currently disabling the SSL option does not disable ssl as ssl is
auto-detected and disabling ssl needs explicit --ssl=off which is
not implemented in the port. I never had a request for this in years
so I decided to just remove the option and have ssl enabled always.

from commit 5d8274d264 :
Also found some manual pages in the src tree.

from commit f2c9ba7c53 :
- add pre-configure check if downloaded mozjs version matches
get-sources.sh.
- change comment to how the upstream project names the open source
variant.
adc0330691
Ronald Klop (ronald) · 7.0.12
databases/mongodb70: add do-test and update to 7.0.12

Changes:
https://www.mongodb.com/docs/manual/release-notes/7.0/#7.0.12---jun-28--2024

The port has had situations in which the code compiled, but the
executables did not work. Try to catch this early with make test.

- new mozjs version
- autoconf is unused now
- pet portclippy, portfmt, portlint
- pkg-message: use default mongo portnr instead of portnr used by unifi.
8b702c041f
Po-Chuan Hsieh (sunpoet) · 7.0.11_1
devel/py-pyyaml: Move devel/py-yaml to devel/py-pyyaml

- Bump PORTREVISION of dependent ports for dependency change
1a80ec7c22
Jason E. Hale (jhale) · 7.0.11
*/*: Add ${PY_SETUPTOOLS} to BUILD_DEPENDS

Fix build when setuptools is removed from RUN_DEPENDS in
Mk/Uses/python.mk.

PR:		270510
Approved by:	portmgr (blanket)
ad593a9d4d
Ronald Klop (ronald) · 7.0.11
databases/mongodb*: document replacement of mongo CLI shell

MongoDB 6.0 and up do not include the 'mongo' CLI shell anymore.
Point users to a replacement.

+ use canonical WWW
d95f05681d
Ronald Klop (ronald) · 7.0.11
databases/mongodb70: upgrade to 7.0.11

changes:
https://www.mongodb.com/docs/manual/release-notes/7.0/#7.0.11---may-23--2024

Version 7.0.10 was tagged but never got release notes on the site.

trivial version bump
59d4b59e53
Ronald Klop (ronald) · 7.0.9_2
databases/mongodb70: Convert post-patch to EXTRACT_AFTER_ARGS

Saves I/O by not extracting bundled deps

PR:	278769
de08bd77dd
Ronald Klop (ronald) · 7.0.9_1
databases/mongodb70: enable non-AVX CPUs by default

Similar to the change in mongodb50.
People use these CPUs with MongoDB.

PR:	277990
fe16603f4f
Ronald Klop (ronald) · 7.0.9
databases/mongodb70: update to 7.0.9

changes:
https://www.mongodb.com/docs/manual/release-notes/7.0/#7.0.9---apr-26--2024
1d4118f21d
Ronald Klop (ronald) · 7.0.8
databases/mongodb70: upgrade to 7.0.8

Changes:
https://www.mongodb.com/docs/manual/release-notes/7.0/#7.0.8---april-3--2024
902d91b3a6
Ronald Klop (ronald) · 7.0.7
databases/mongodb70: update to 7.0.7

changes:
https://www.mongodb.com/docs/manual/release-notes/7.0/#7.0.7---mar-18--2024
3ea142636d
Ronald Klop (ronald) · 7.0.6
databases/mongodb70: update to 7.0.6

changes:
https://www.mongodb.com/docs/manual/release-notes/7.0/#7.0.6---feb-28--2024

Security:       CVE-2024-1351 Improper Certificate Validation
a153805da2
Wen Heping (wen) · 7.0.5
databases/mongodb70: Fix build with python-3.11

PR:		275494
Approved by:	portmgr(blanket, fix build)
3a57a3175c
Ronald Klop (ronald) · 7.0.5
databases/mongodb70: update to 7.0.5

Changes:
https://www.mongodb.com/docs/manual/release-notes/7.0/#7.0.5---jan-5--2024

- version bump
- poudriere stage-qa: ok (aarch64)
6b0e06a288
Ronald Klop (ronald) · 7.0.4
databases/mongodb70: update to 7.0.4

changes:
https://www.mongodb.com/docs/manual/release-notes/7.0/#7.0.4---nov-13--2023

version bump
poudriere stage-qa: ok (on aarch64)
3fa3d57a3a
Ronald Klop (ronald) · 7.0.3
databases/mongodb70: update to 7.0.3

Changes:
https://www.mongodb.com/docs/manual/release-notes/7.0/#7.0.3---nov-9--2023

version bump
poudriere stage-qa: ok
8c8c68e7db
Ronald Klop (ronald) · 7.0.2
databases/mongodb70: disable LTO for now

This was the error:
Checking if linker supports -flto... yes
lto compilation currently only works with the --linker=gold
See /wrkdirs/usr/ports/databases/mongodb70/work/mongo-r7.0.2/build/scons/config.log for details
*** Error code 1

See logs for the full error:
https://pkg-status.freebsd.org/beefy18/data/main-amd64-default/pecb3f8a4918b_s8818f0f112/logs/mongodb70-7.0.2.log
b895b4ead1
Ronald Klop (ronald) · 7.0.2
databases/mongodb70: update to 7.0.2

Changes:
https://www.mongodb.com/docs/manual/release-notes/7.0/#7.0.2---sep-29--2023

version bump
poudriere stage-qa: ok
a3646dd6a8
Ronald Klop (ronald) · 7.0.1
databases/mongodb70: update to 7.0.1

changes: https://www.mongodb.com/docs/manual/release-notes/7.0-changelog/#7.0.1-changelog

version bump
poudriere stage-qa: ok
cf8320b0d6
Ronald Klop (ronald) · 7.0.0
databases/mongodb70: update to 7.0.0 release

Changes: https://www.mongodb.com/docs/v7.0/release-notes/7.0/

* version bump
* new option ARMV80A to support older ARM cpus like Raspberry Pi 4
* pet portclippy and portfmt
* poudriere stage-qa: ok

As upstream has stopped supporting non-LSE ARM cpus I'm adapting
the port also. The option ARMV80A is for backwards compatibility,
but use at your own risk. See pkg-message for more info.
32bbdaf1f4
Muhammad Moinur Rahman (bofh) · 7.0.0.r10
Revert "databases/mongodb70: Fix build with llvm16"

This reverts commit 4a6a3534dde02d293438a929e06950c64a71a33d.

There was a build failure in my local build instance but this was a
false positive and actually this ports build fine without the changes.

Reported by: fuz
Approved by: portmgr (blanket)
Sponsored by: The FreeBSD Foundation
3317a02901
Muhammad Moinur Rahman (bofh) · 7.0.0.r10
databases/mongodb70: Fix build with llvm16

Approved by:	portmgr (blanket)
Sponsored by:	The FreeBSD Foundation
4a6a3534dd
Ronald Klop (ronald) · 7.0.0.r10
databases/mongodb70: update to RC10

Release Candidate

Please read the notes before using:
https://www.mongodb.com/docs/v7.0/release-notes/7.0/#release-notes-for-mongodb-7.0--release-candidate-

* version bump
* pet portclippy
* poudriere stage-qa: ok
9c4a212eb5
Ronald Klop (ronald) · 7.0.0.r8
databases/mongodb70: update to RC8

Release Candidate

Please read the notes before using:
https://www.mongodb.com/docs/v7.0/release-notes/7.0/#release-notes-for-mongodb-7.0--release-candidate-

* trivial version bump
* typo in pkg-message
* poudriere stage-qa: ok
0763c9fcb5
Ronald Klop (ronald) · 7.0.0.r7
databases/mongodb70: update to RC7

Release Candidate

Please read the notes before using:
https://www.mongodb.com/docs/v7.0/release-notes/7.0/#release-notes-for-mongodb-7.0--release-candidate-

* trivial version bump
* poudriere stage-qa: ok
66f14f39ca
Ronald Klop (ronald) · 7.0.0.r6
databases/mongodb70: update to RC6

Still Release Candidate status. Read the notes:
https://www.mongodb.com/docs/v7.0/release-notes/7.0/
08bb784bcf
Ronald Klop (ronald) · 7.0.0.r5
databases/mongodb70: update to 7.0.0 RC5

Still Release Candidate status. Read the notes:
https://www.mongodb.com/docs/v7.0/release-notes/7.0/
886d17d801
Ronald Klop (ronald) · 7.0.0.r4
databases/mongodb70: fix build on 14-current

Fixes provided by Dimitry in a private reply on https://lists.freebsd.org/archives/freebsd-ports/2023-May/003870.html. Dank je wel!

poidriere stage-qa ok
runtime tested: proper clean start and restart on existing db
3d3f9b4f57
Ronald Klop (ronald) · 7.0.0.r4
databases/mongodb70: update to 7.0.0 RC4

Still Release Candidate status. Read the notes:
https://www.mongodb.com/docs/v7.0/release-notes/7.0/

I had no time to test fixes for FreeBSD 14 yet. So 14 is broken still.
04da06a414
Ronald Klop (ronald) · 7.0.0.r3
databases/mongodb70: update to 7.0.0 RC3

Still Release Candidate status. Read the notes:
https://www.mongodb.com/docs/v7.0/release-notes/7.0/

I had no time to test fixes for FreeBSD 14 yet. So 14 is broken still.
be053ac53f
Ronald Klop (ronald) · 7.0.0.r2
databases/mongodb70: update to RC2

Release Candidate
Read the instructions:
https://www.mongodb.com/docs/v7.0/release-notes/7.0/
69173c2565
Muhammad Moinur Rahman (bofh) · 7.0.0.r0_1
*/*: llvm15 build fixes

llvm15 was also merged into 13.2-STABLE effective from OSVERSION
1302505. Fix the ports that failed to build with llvm15.

Approved by:	portmgr (blanket)
9b178ffd7e
Ronald Klop (ronald) · 7.0.0.r0_1
databases/mongodb70: fix build on 14-CURRENT

Port does not build with clang15 but does with clang14.

/usr/include/c++/v1/__algorithm/comp.h:36:71: error: invalid operands to binary expression ('const mongo::SSLX509Name::Entry' and 'const mongo::SSLX509Name::Entry')
    bool operator()(const _T1& __x, const _T1& __y) const {return __x == __y;}
                                                                  ~~~ ^  ~~~
b66ad1748e
Piotr Kubaj (pkubaj) · 7.0.0.r0
databases/mongodb70: fix build on powerpc64le

In file included from src/third_party/abseil-cpp/dist/absl/base/internal/unscaledcycleclock.cc:27:
/usr/include/sys/sysctl.h:1189:25: error: unknown type name 'u_int'
int     sysctl(const int *, u_int, void *, size_t *, const void *, size_t);
                            ^
src/third_party/abseil-cpp/dist/absl/base/internal/unscaledcycleclock.cc:95:10: error: unknown type name 'once_flag'
  static once_flag init_timebase_frequency_once;
         ^
src/third_party/abseil-cpp/dist/absl/base/internal/unscaledcycleclock.cc:97:18: error: no member named 'LowLevelCallOnce' in namespace 'absl::base_internal'
  base_internal::LowLevelCallOnce(&init_timebase_frequency_once, [&]() {
  ~~~~~~~~~~~~~~~^
3 errors generated.
c93051860c
Ronald Klop (ronald) · 7.0.0.r0
databases/mongodb70: fix path in patch
05a44d7cbc
Ronald Klop (ronald) · 7.0.0.r0
databases/mongodb70: add new port

Mind that this is still a RC.

Changelog:
https://www.mongodb.com/docs/v7.0/release-notes/7.0/

* based on databases/mongodb60
* disabled --use-system-icu as version from ports gives an error on start-up:
  https://www.mongodb.com/community/forums/t/mongodb-7-0-rc0-cycle-in-dependency-graph-loadicudata/224571
* patch to compile asio-master with c++20
* commented out 'metrics_client' in SConstruct, symbol is not available in the repo, doesn't seem to be needed for the build
a677d700a6