CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

databases/mongodb808.0.34

MongoDB Community Edition (8.0.x Branch)

Maintainer
ronald@FreeBSD.org
Packages
mongodb80 8.0.34
Upstream
Higher version available: 9.0.4
CPE
mongodb:mongodb from the port
WWW
https://www.mongodb.com/docs/v8.0/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (21)

VuXML entries whose affected range this version has left.

Commits (54)

Ronald Klop (ronald) · 8.0.34
databases/mongodb80: 8.0.34

Target install-dist instead of install-core. The documenation says
install-dist is "intended for a functional end-user installation".

Announcement:
https://www.mongodb.com/community/forums/t/mongodb-8-0-34-is-released/344300?u=r_k

Release Notes:
https://www.mongodb.com/docs/manual/release-notes/8.0/#8034---oct-13-2026

Security:	yes, see release notes for CVEs
36905c4fec
Mikael Urankar (mikael) · 8.0.32_1
lang/rust: Bump revisions after 1.99.0

PR:		299016
9c878207a1
Ronald Klop (ronald) · 8.0.32
databases/mongodb80: restore python 3.14 support

This always regresses after a big update. Sorry Peter :-)

Peter also added Bazel --batch mode. Explanation for batch mode
is in a comment in the Makefile and in the PR.

PR:	298510
8975f39f38
Ronald Klop (ronald) · 8.0.32
databases/mongodb80: 8.0.32

Added an extra Makefile to generate the *-bazel-repository-cache.tar.gz
in a reproducable way.

Announcement:
https://www.mongodb.com/community/forums/t/mongodb-8-0-32-is-released/343535?u=r_k

Release Notes:
https://www.mongodb.com/docs/manual/release-notes/8.0/#8032---sept-11-2026

Security:	CVE-2026-89099 "Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption"
3ecd3d0844
Ronald Klop (ronald) · 8.0.29
databases/mongodb80: 8.0.29

Upstream changed the build tool from SCons to Bazel.
Please test before deploying to production.

Announcement:
https://www.mongodb.com/community/forums/t/mongodb-8-0-29-is-released/342426?u=r_k

Release Notes:
https://www.mongodb.com/docs/manual/release-notes/8.0/#8029---aug-11-2026
dbe3ef482b
Ronald Klop (ronald) · 8.0.12_12
databases/mongodb80: build fix for python 3.14

Based on the fix for databases/mongodb70.

No portrevision bump as it does not affect the default build.

PR:	298510
Reported by:	peter.sopko
Tested by:	peter.sopko
540a0eda8c
Mikael Urankar (mikael) · 8.0.12_12
lang/rust: Bump revisions after 1.98.1

PR:		298139
7316461925
Mikael Urankar (mikael) · 8.0.12_11
lang/rust: Bump revisions after 1.97.1

PR:		296645
9c892d2601
Ronald Klop (ronald) · 8.0.12_10
databases/mongodb80: fix build with python312
8b6c800c8a
Mikael Urankar (mikael) · 8.0.12_10
lang/rust: Bump revisions after 1.96.0

PR:		295694
e29b5eeec3
Ronald Klop (ronald) · 8.0.12_9
databases/mongodb80: build error on FreeBSD 16

src/third_party/boost/boost/mpl/aux_/integral_wrapper.hpp:62:51: error: in-class initializer for static data member is not a constant expression
   62 |     BOOST_STATIC_CONSTANT(AUX_WRAPPER_VALUE_TYPE, prior_value = BOOST_MPL_AUX_STATIC_CAST(AUX_WRAPPER_VALUE_TYPE, (N - 1)));
      |     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Upstream has newer versions. So upgrading probably fixes this.
But upgrading needs adoption of Bazel as a build system.
Help is appreciated for moving to Bazel.
0c3c108c52
Mikael Urankar (mikael) · 8.0.12_9
lang/rust: Bump revisions after 1.95.0

PR:		294615
17bf498fd2
Mikael Urankar (mikael) · 8.0.12_8
lang/rust: Bump revisions after 1.94.0

PR:		293615
43f5b4a72f
Michael Osipov (michaelo) · 8.0.12_7
databases/mongodb{7,8}0: Use documented placeholder NETWOKING in RC scripts

PR:		293652
Approved by:	ronald (maintainer timeout)
Differential Revision:	https://reviews.freebsd.org/D55712
c5ebe54afb
Ronald Klop (ronald) · 8.0.12_6
databases/mongodb80: harden the port to external CONFIGURE_ARGS

CONFIGURE_ARGS is directly connected to CONFIGURE_SCRIPT and the script
only accepts 2 parameters. Exit 1 on incorrect number of parameters.
And don't allow to += on CONFIGURE_ARGS.

Not bumping PORTREVISION, no content change intended.

NB: This is the same change as 380338c53b75ef594b1faccc59bc111546809f31
for mongodb70.

PR:	291951
0e013ec00b
Mikael Urankar (mikael) · 8.0.12_6
lang/rust: Bump revisions after 1.93.0

PR:		292360
3d631100e8
Mikael Urankar (mikael) · 8.0.12_5
lang/rust: Bump revisions after 1.92.0

PR:		291582
5e496c7707
Mikael Urankar (mikael) · 8.0.12_4
lang/rust: Bump revisions after 1.91.1

PR:		290816
d6b6027df6
Mikael Urankar (mikael) · 8.0.12_3
lang/rust: Bump revisions after 1.90.0

PR:		289709
97b5de4ffc
Mikael Urankar (mikael) · 8.0.12_2
lang/rust: Bump revisions after 1.89.0

PR:		288923
b21956d7db
Ronald Klop (ronald) · 8.0.12_1
databases/mongodb[78]0: improve a patch

Be pedantic that '!= 0' is not the same as '== -1'. And indeed -1 is what
is documented in the man page of _umtx_op to indicate an error.

No functional change expected.

Reported by:	https://github.com/mongodb/mongo/pull/1607#pullrequestreview-2677292316
cd759f83ef
Ronald Klop (ronald) · 8.0.12
databases/mongodb70: 7.0.23

Includes patch to implement waitable atomics for FreeBSD for
https://jira.mongodb.org/browse/SERVER-81797.
This patch is developed by me. It did not go through QA of MongoDB Inc.
I asked to upstream the patch but they don't want to take responsibilty
for code they don't run themselves. (Which I can understand from their
perspective.)
https://github.com/mongodb/mongo/pull/1607#issuecomment-2996276435
https://jira.mongodb.org/browse/SERVER-99225
Anyway, this has run without errors for a while on my Raspberry Pi + net-mgmt/unifi9.
I don't have full QA in place and could only do limited testing. I can't
take any responsibilty for the quality of the patch.

Make backups and test for yourself in your setup before upgrading
any critical production environment.

Changes:
https://www.mongodb.com/docs/manual/release-notes/7.0/#7.0.23---aug-13--2025

Announcement:
https://www.mongodb.com/community/forums/t/mongodb-7-0-23-is-released/327242?u=r_k
2236885f4e
Ronald Klop (ronald) · 8.0.12
databases/mongodb80: 8.0.12

Changes:
https://www.mongodb.com/docs/manual/release-notes/8.0/#8.0.12---july-23--2025

Announcement:
https://www.mongodb.com/community/forums/t/mongodb-8-0-12-is-released/326400?u=r_k
8cc0a5ea3f
Ronald Klop (ronald) · 8.0.11
databases/mongodb80: update to 8.0.11

Changes:
https://www.mongodb.com/docs/manual/release-notes/8.0/#8.0.11---june-30--2025
fb40193150
Mikael Urankar (mikael) · 8.0.10_2
lang/rust: Bump revisions after 1.88.0

PR:		287766
f3f7e555b0
Mikael Urankar (mikael) · 8.0.10_1
lang/rust: Bump revisions after 1.87.0

PR:		286829
3ed29b8185
Ronald Klop (ronald) · 8.0.10
databases/mongodb80: 8.0.10

Changes:
https://www.mongodb.com/docs/manual/release-notes/8.0-changelog/#8.0.10-changelog

- follow update of mozjs to ESR 128.10
5bb5e64b0b
Ronald Klop (ronald) · 8.0.9
databases/mongodb80: 8.0.9

Changes:
https://www.mongodb.com/docs/v8.0/release-notes/8.0/#8.0.9---may-1--2025

Announcement:
https://www.mongodb.com/community/forums/t/mongodb-8-0-9-is-released/321462?u=r_k

- refactored do-configure to use HAS_CONFIGURE which properly passes
CONFIGURE_ENV
- updates spidermonkey to MozJS 128.8-ESR
- needs cbindgen now
- pet portclippy and portfmt (moved vars around)
- replaced multiple paths with MOZJS_WRKSRC
- removed a mozjs patch which is in upstream now
751840d1b2
Guido Falsi (madpilot) · 8.0.8_1
textproc/snowballstemmer: chase shlib version bump
0119f8dcd8
Ronald Klop (ronald) · 8.0.8
databases/mongodb80: 8.0.8

Changes:
https://www.mongodb.com/docs/manual/release-notes/8.0/#8.0.8---apr-14--2025

Announcement:
https://www.mongodb.com/community/forums/t/mongodb-8-0-8-is-released/320211?u=r_k
855ba014ea
Ronald Klop (ronald) · 8.0.7
databases/mongodb80: 8.0.7

Changes:
https://www.mongodb.com/docs/manual/release-notes/8.0/#8.0.7---apr-14--2025

"This release contains security or reliability improvements. These release notes will be updated when more information is available."

Security:	details not known yet
64c49b4649
Ronald Klop (ronald) · 8.0.6
databases/mongodb80: 8.0.6

Changes:
https://www.mongodb.com/docs/manual/release-notes/8.0/#8.0.6---mar-19--2025
cb4766b7e7
Ronald Klop (ronald) · 8.0.5
databases/mongodb80: update to 8.0.5

Changes:
https://www.mongodb.com/docs/manual/release-notes/8.0/#8.0.5---feb-20--2025
https://www.mongodb.com/community/forums/t/mongodb-8-0-5-rc1-is-released/312357?u=r_k

- spidermonkey updated to 115.19.0esr (from esr115.7)
- be more verbose in pre-configure check so I don't need to lookup the new revision
98de9ddd99
Ronald Klop (ronald) · 8.0.4_3
databases/mongodb80: add flavor for RPI-compatible version

Similar to commit 5ceff01406677 for mongodb70.
No revision bump as the default flavor does not change.
c8877d2477
Ronald Klop (ronald) · 8.0.4_3
databases/mongodb80: reimplement waitable_atomic.cpp

Reimplement src/mongo/platform/waitable_atomic.cpp using absolute time.
This uses more simple conversions.
The implementation is now similar to the Linux version instead of the
MacOS version.

It should not have any functional change.

Reported by:	https://infosec.exchange/@david_chisnall/113797905538197081
Reported by:	https://github.com/mongodb/mongo/pull/1607#issuecomment-2605593775
758742ca83
Ronald Klop (ronald) · 8.0.4_2
databases/mongodb[78]0: use internal pcre2 code

Fails to build with future update of PCRE2 10.45-RC1.

PR:	283694
Reported by:	diizzy@ (Daniel Engberg)
193f8fc2b4
Ronald Klop (ronald) · 8.0.4_1
databases/mongodb80: fix build with llvm19

Build with clang from base.
Uses 2 public patches. Documentation is in the patches themselves.
4df468324a
Ronald Klop (ronald) · 8.0.4
databases/mongodb80: update to 8.0.4

Changes and announcement:
https://www.mongodb.com/community/forums/t/mongodb-8-0-4-is-released/307122?u=r_k
96d78c0507
Ronald Klop (ronald) · 8.0.3
databases/mongodb80: patch is not necessary anymore

The same flag was set upstream in

branch v7.0: (a few days after I committed the patch)
https://github.com/mongodb/mongo/commit/7a0dcfa565aba4aaef159bf09cfaf2269678eb6c

master (which became 8.0):
https://github.com/mongodb/mongo/commit/ad8a74f5782fb8b3f24f74305c44da725732616a
addb8dafff
Ronald Klop (ronald) · 8.0.3
databases/mongodb80: update to 8.0.3

changes:
https://www.mongodb.com/docs/manual/release-notes/8.0/#8.0.3---oct-24--2024

Security:	CVE-2024-10921
fbfb8be909
Ronald Klop (ronald) · 8.0.1_2
databases/mongodb[78]0: fix build with NOAVX enabled

Thanks to Yuri and Borja who helped creating patches and tested.

PR:	282471
f806050016
Ronald Klop (ronald) · 8.0.1_1
databases/mongodb[78]0: NOAVX is broken

Disable NOAVX as default until further investigation.

ld.lld: error: undefined symbol: mozilla::sse_private::avx2_enabled
>>> referenced by SSE.h:324 (src/third_party/mozjs/include/mozilla/SSE.h:324)
>>>               extract/mozglue/misc/SIMD.o:(mozilla::SupportsAVX2()) in archive build/opt/third_party/mozjs/libmozjs.a
>>> referenced by SSE.h:324 (src/third_party/mozjs/include/mozilla/SSE.h:324)
>>>               extract/mozglue/misc/SIMD.o:(mozilla::SIMD::memchr8(char const*, char, unsigned long)) in archive build/opt/third_party/mozjs/libmozjs.a
>>> referenced by SSE.h:324 (src/third_party/mozjs/include/mozilla/SSE.h:324)
>>>               extract/mozglue/misc/SIMD.o:(mozilla::SIMD::memchr16(char16_t const*, char16_t, unsigned long)) in archive build/opt/third_party/mozjs/libmozjs.a
>>> referenced 1 more times

ld.lld: error: undefined symbol: mozilla::SIMD::memchr8AVX2(char const*, char, unsigned long)
>>> referenced by SIMD.cpp:463 (src/third_party/mozjs/extract/mozglue/misc/SIMD.cpp:463)
>>>               extract/mozglue/misc/SIMD.o:(mozilla::SIMD::memchr8(char const*, char, unsigned long)) in archive build/opt/third_party/mozjs/libmozjs.a

ld.lld: error: undefined symbol: mozilla::SIMD::memchr16AVX2(char16_t const*, char16_t, unsigned long)
>>> referenced by SIMD.cpp:476 (src/third_party/mozjs/extract/mozglue/misc/SIMD.cpp:476)
>>>               extract/mozglue/misc/SIMD.o:(mozilla::SIMD::memchr16(char16_t const*, char16_t, unsigned long)) in archive build/opt/third_party/mozjs/libmozjs.a

ld.lld: error: undefined symbol: mozilla::SIMD::memchr64AVX2(unsigned long const*, unsigned long, unsigned long)
>>> referenced by SIMD.cpp:484 (src/third_party/mozjs/extract/mozglue/misc/SIMD.cpp:484)
>>>               extract/mozglue/misc/SIMD.o:(mozilla::SIMD::memchr64(unsigned long const*, unsigned long, unsigned long)) in archive build/opt/third_party/mozjs/libmozjs.a
c++: error: linker command failed with exit code 1 (use -v to see invocation)

PR:	282471
a3bd39f874
Ronald Klop (ronald) · 8.0.1_1
databases/mongodb[78]0: fix NOAVX option

bump portrevision as it did build but generated broken executables
piggyback a small portlint pacifier

PR:	282471
2dbe4cb866
Ronald Klop (ronald) · 8.0.1
databases/mongodb80: unbreak on 15 + llvm 19.1.2

stick to <= llvm18 on FreeBSD 15

fixes:
In file included from src/third_party/mozjs/platform/aarch64/freebsd/build/Unified_cpp_js_src13.cpp:2:
In file included from src/third_party/mozjs/extract/js/src/vm/GlobalObject.cpp:7:
In file included from src/third_party/mozjs/extract/js/src/vm/GlobalObject.h:34:
In file included from src/third_party/mozjs/extract/js/src/vm/JSContext.h:22:
In file included from src/third_party/mozjs/extract/js/src/jit/PcScriptCache.h:12:
In file included from src/third_party/mozjs/extract/js/src/vm/Runtime.h:49:
In file included from src/third_party/mozjs/extract/js/src/vm/Caches.h:17:
In file included from src/third_party/mozjs/extract/js/src/frontend/ScopeBindingCache.h:20:
In file included from src/third_party/mozjs/extract/js/src/vm/Scope.h:34:
In file included from src/third_party/mozjs/extract/js/src/vm/JSFunction.h:25:
In file included from src/third_party/mozjs/extract/js/src/vm/JSScript.h:41:
In file included from src/third_party/mozjs/extract/js/src/vm/SharedImmutableStringsCache.h:22:
src/third_party/mozjs/extract/js/src/threading/ExclusiveData.h:113:29: error: reference to non-static member function must be called
  113 |       : lock_(std::move(rhs.lock)), value_(std::move(rhs.value_)) {
      |                         ~~~~^~~~
1 error generated.
983cfe5519
Ronald Klop (ronald) · 8.0.1
databases/mongodb80: 8.0.1

Announcement:
https://www.mongodb.com/community/forums/t/mongodb-8-0-1-is-released/300450?u=r_k

- pet portfmt
dba97e4706
Ronald Klop (ronald) · 8.0.0
databases/mongodb80: update to 8.0.0

First release in the 8.0 series.

Release Notes:
https://www.mongodb.com/docs/manual/release-notes/8.0/

Changes since RC20:
https://github.com/mongodb/mongo/compare/r8.0.0-rc20...r8.0.0

- pet portlint on ${SH}.
14961fc3af
Ronald Klop (ronald) · 8.0.0.r20
databases/mongodb80: rc20

changes:
https://github.com/mongodb/mongo/compare/r8.0.0-rc19...r8.0.0-rc20

Only 1 pretty obvious bug fix commit on the branch so I dare to
commit this without the usual 24+ hours test build on my RPI4.
fa2cae9f91
Ronald Klop (ronald) · 8.0.0.r19
databases/mongodb80: rc19

changes:
https://github.com/mongodb/mongo/compare/r8.0.0-rc18...r8.0.0-rc19

- remove patch for get-sources.sh, the file is not used, we fetch the
mozjs source via the port.

- remove REINPLACE_CMD, it didn't change anything anymore.
====> Running Q/A tests (stage-qa)
Warning: Possible REINPLACE_CMD issues:
- - REINPLACE_CMD ran, but did not modify file contents: /wrkdirs/usr/ports/databases/mongodb80/work/spidermonkey-bb6edb4fcd43607c87de81df8c58db11a663634a/python/mozbuild/mozbuild/util.py
- - REINPLACE_CMD ran, but did not modify file contents: /wrkdirs/usr/ports/databases/mongodb80/work/spidermonkey-bb6edb4fcd43607c87de81df8c58db11a663634a/python/mozbuild/mozbuild/preprocessor.py
- - REINPLACE_CMD ran, but did not modify file contents: /wrkdirs/usr/ports/databases/mongodb80/work/spidermonkey-bb6edb4fcd43607c87de81df8c58db11a663634a/python/mozbuild/mozbuild/backend/base.py
- - REINPLACE_CMD ran, but did not modify file contents: /wrkdirs/usr/ports/databases/mongodb80/work/spidermonkey-bb6edb4fcd43607c87de81df8c58db11a663634a/python/mozbuild/mozbuild/action/process_define_files.py
154fe5e1e0
Ronald Klop (ronald) · 8.0.0.r18
databases/mongodb80: rc18

https://github.com/mongodb/mongo/compare/r8.0.0-rc17...r8.0.0-rc18
48b65f81be
Ronald Klop (ronald) · 8.0.0.r17
databases/mongodb80: update to 8.0.0-rc17

By popular demand an update to release candidate 17.

Changes:
https://github.com/mongodb/mongo/compare/r8.0.0-rc16...r8.0.0-rc17
e157872484