8.0.29-13 Release notes

[rasika-chivate]

No description provided.

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[Copilot]

Pull request overview

Copilot reviewed 4 out of 4 changed files in this pull request and generated no new comments.

Suppressed comments (7)

docs/release_notes/8.0.29-13.md:22

• This level-three heading has no level-two parent, which nests the platform section under “Upgrade recommendation.” Restore the release-highlights heading used by the preceding release so the document hierarchy and generated TOC are correct.

### Extended platform support: RHEL 10 and its derivatives, and Debian 13

docs/release_notes/8.0.29-13.md:35

• This note directs readers to install 8.0.28-12 even though the preceding upgrade recommendation says that affected 8.0.x users should upgrade to 8.0.29-13 immediately. Refer to the current page version so Debian 13 users are not told to install the superseded build.

    You can install Percona Server for MongoDB 8.0.28-12 on Debian 13. Although upstream MongoDB does not yet list Debian 13 as a supported platform, Percona builds and tests these packages independently, making them available ahead of upstream support.

docs/release_notes/8.0.29-13.md:42

• Remove the space before the sentence-ending period.

This release fixes vulnerabilities inherited from upstream MongoDB. The severity categories below follow the upstream [CVSS scores :octicons-link-external-16:](https://nvd.nist.gov/vuln-metrics/cvss){:target="_blank"} .

docs/release_notes/8.0.29-13.md:84

• This 8.0.29 release page links to the MongoDB 7.0.40 changelog, so readers are sent to an unrelated release line. Link and label the 8.0.29 changelog instead.

For the complete upstream changelog, see [MongoDB 7.0.40 Community Edition :octicons-link-external-16:](https://www.mongodb.com/docs/manual/release-notes/7.0-changelog/#std-label-7.0.40-changelog){:target="_blank"}.

docs/release_notes/8.0.29-13.md:14

• This URL does not follow the upstream release-section fragment used throughout these notes: it omits the trailing slash, version dots, and the second hyphen before the year, so it will not jump to the 8.0.29 section. For comparison, docs/release_notes/8.0.28-12.md:14 and docs/release_notes/8.0.26-11.md:14 use the complete fragment format.

- [MongoDB 8.0.29 Community Edition :octicons-link-external-16:](https://www.mongodb.com/docs/manual/release-notes/8.0#8029---aug-11-2026){:target="_blank"}.

docs/release_notes/8.0.29-13.md:5

• The 8.0.29 page still resolves the 8.0.28 date, so its rendered heading will show August 10 instead of this release's configured date.

This issue also appears in the following locations of the same file:

• line 14
• line 22
• line 35
• line 42
• line 84

# Percona Server for MongoDB {{ page.meta.version }} ({{date.8_0_28}})

mkdocs-base.yml:254

• The new page is added to navigation, but docs/release_notes/index.md still starts at 8.0.28-12. Add 8.0.29-13 to that index as well; otherwise the release-notes index remains stale and omits the release.

      - release_notes/8.0.29-13.md

[Copilot]

Pull request overview

Copilot reviewed 4 out of 4 changed files in this pull request and generated no new comments.

Suppressed comments (4)

docs/release_notes/8.0.29-13.md:5

• The page title still references date.8_0_28, so this 8.0.29 release renders with the previous release date (August 10) instead of the newly defined 8.0.29 date.

# Percona Server for MongoDB {{ page.meta.version }} ({{date.8_0_28}})

docs/release_notes/8.0.29-13.md:14

• This upstream release link uses a malformed 8.0.29 fragment (8029 and a missing separator before the year), unlike the upstream URL format used by the adjacent release notes, so it will not jump to the 8.0.29 section.

- [MongoDB 8.0.29 Community Edition :octicons-link-external-16:](https://www.mongodb.com/docs/manual/release-notes/8.0#8029---aug-11-2026){:target="_blank"}.

docs/release_notes/8.0.29-13.md:66

• This 8.0.29 release note sends readers to the MongoDB 7.0.40 changelog. The link and label need to reference the matching 8.0.29 upstream changelog.

For the complete upstream changelog, see [MongoDB 7.0.40 Community Edition :octicons-link-external-16:](https://www.mongodb.com/docs/manual/release-notes/7.0-changelog/#std-label-7.0.40-changelog){:target="_blank"}.

mkdocs-base.yml:254

• The new page is added to the navigation, but docs/release_notes/index.md still starts at 8.0.28. Readers using the release-notes index therefore cannot discover 8.0.29; add the corresponding 8.0.29 entry there as part of this release update.

      - release_notes/8.0.29-13.md

[Copilot]

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated no new comments.

Suppressed comments (5)

docs/release_notes/8.0.29-13.md:48

• Remove the space splitting the compound term denial-of-service.

- [SERVER-130111 :octicons-link-external-16:](https://jira.mongodb.org/browse/SERVER-130111){:target="_blank"}([CVE-2026-18701 :octicons-link-external-16:](https://www.cve.org/CVERecord?id=CVE-2026-18701){:target="_blank"}): Fixed an issue in query processing where a user with **read privileges** could terminate `mongod` with a specially crafted query filter, resulting in a denial- of-service.

docs/release_notes/8.0.29-13.md:14

• The upstream section fragment is malformed: it omits the dots in 8.0.29, the slash before the fragment, and the second separator before the year. Unlike the neighboring release links (for example, docs/release_notes/8.0.28-12.md:14), this will not navigate to the 8.0.29 section.

- [MongoDB 8.0.29 Community Edition :octicons-link-external-16:](https://www.mongodb.com/docs/manual/release-notes/8.0#8029---aug-11-2026){:target="_blank"}.

docs/release_notes/8.0.29-13.md:24

• Remove the stray space before the period.

This issue also appears on line 48 of the same file.

This release fixes vulnerabilities inherited from upstream MongoDB. The severity categories below follow the upstream [CVSS scores :octicons-link-external-16:](https://nvd.nist.gov/vuln-metrics/cvss){:target="_blank"} .

docs/release_notes/8.0.29-13.md:36

• The first CVE URL is the only external link in this list without its own target="_blank" attribute; the attribute after the second URL does not apply to both links. Add it so this CVE behaves consistently with the external-link convention used throughout docs/release_notes/8.0.28-12.md:86-128.

- [SERVER-130481 :octicons-link-external-16:](https://jira.mongodb.org/browse/SERVER-130481){:target="_blank"}([CVE-2026-18690 :octicons-link-external-16:](https://www.cve.org/CVERecord?id=CVE-2026-18690), [CVE-2026-18698 :octicons-link-external-16:](https://www.cve.org/CVERecord?id=CVE-2026-18698){:target="_blank"}): Fixed an authorization issue where a user with limited database-level privileges could perform operations on protected system collections without the required permissions. This could allow critical system collections to be dropped and recreated.

docs/release_notes/8.0.29-13.md:40

• This section explicitly documents fixes inherited from upstream MongoDB, but this entry attributes the vulnerable implementation to Percona Server for MongoDB. That incorrectly suggests a Percona-specific flaw; identify it as MongoDB Server’s geospatial query processing, consistent with the upstream attribution and the wording on line 34.

- [SERVER-130188 :octicons-link-external-16:](https://jira.mongodb.org/browse/SERVER-130188){:target="_blank"}([CVE-2026-18694 :octicons-link-external-16:](https://www.cve.org/CVERecord?id=CVE-2026-18694){:target="_blank"}): Fixed an issue in Percona Server for MongoDB’s geospatial query processing where malformed geometry data could be stored and later processed without proper validation. A query against the affected data could crash the server or expose a limited amount of process memory.