ObjectRocket incident
MongoDB ZLIB Compressor Configuration Notification
Resolved after 13 days, affecting Mongo and Mongo (Mongo — US-West) and 1 more, on December 23, 2025.
Rackspace DBaaS (formerly ObjectRocket) has taken steps to mitigate the MongoDB zlib security issue for its MongoDB customers. Customers wishing to discuss specific actions taken or future changes for their databases should contact Rackspace DBaaS at [email protected].
Affected components
Update timeline
- identified Dec 23, 2025, 05:08 PM UTC
To DBaaS Customers on MongoDB v3.6 and above, MongoDB has announced a security vulnerability affecting server versions that support client-server zlib network compression, specifically MongoDB Server versions 3.6 and higher. Links to MongoDB security alerts are provided below. MongoDB Alerts - https://www.mongodb.com/resources/products/alerts#security SERVER-115508 - https://jira.mongodb.org/browse/ CVE-2025-14847 - https://www.cve.org/CVERecord?id=CVE-2025-14847 Rackspace DBaaS (formerly ObjectRocket) will begin disabling zlib compression on all impacted MongoDB instances starting December 22, 2025. As DBaaS engineers deploy the configuration change, processes will experience a brief restart, and client connections typically reconnect automatically. DBaaS will reach out directly to impacted customers.
- resolved Jan 05, 2026, 05:24 PM UTC
Rackspace DBaaS (formerly ObjectRocket) has taken steps to mitigate the MongoDB zlib security issue for its MongoDB customers. Customers wishing to discuss specific actions taken or future changes for their databases should contact Rackspace DBaaS at [email protected].
Your product runs on more than ObjectRocket
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services