Skip to content

23.8.16 Altinity Stable
Compare
Choose a tag to compare
@Enmk Enmk released this 26 Sep 00:16
· 34 commits to releases/23.8.16 since this release
v23.8.16.41.altinitystable
9992f5e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.

Changes compared to upstream's v23.8.16.40-lts (e143a90)

Bug fixes

Performance improvements

Improvement

Build/Testing/Packaging Improvement

  • Make builds possible on Altinity's infrastructure
  • clickhouse-regression test suite (#338 by @MyroTk)
  • Changed "version is not official" log message on failure (#369 by @Enmk)
  • Fix kerberized_hadoop docker image build issue (#394 by @ilejn)
  • Reuse unchanged images #455 by @MyroTk
  • Pinned version of pip packet requests==2.31.0 in attempt to fix: 'Error while fetching server API version: Not supported URL scheme http+docker' (#409 by @Enmk)
  • Aarch64 builds with better introspection (-no-pie) (#396 by @Enmk)
  • Fixed the docker tag for docker server test image (#463 by @MyroTk)
  • Add SignAarch64 job to match SignRelease (#462 by @MyroTk)
  • Fix test_distributed_directory_monitor_split_batch_on_failure_OFF (#464 by @Enmk)
  • Fix kererberized_hadoop tests (#468, #459 by @ilejn)
  • Updated reference to clickhouse-regression suite (#467 by @MyroTk)
  • Scheduled run + CI/CD fixups (#402 by @MyroTk)

upstream ClickHouse changes between v23.8.16.40-lts (e143a90) and v23.8.11.28-lts (31879d2)

Critical Bug Fix (crash, LOGICAL_ERROR, data loss, RBAC))

Bug Fix (user-visible misbehavior in an official stable release))

  • The query cache now denies access to entries when the user is re-created or assumes another role. This improves prevents attacks where 1. an user with the same name as a dropped user may access the old user's cache entries or 2. a user with a different role may access cache entries of a role with a different row policy. (#58611 by Robert Schulze via #61439)
  • Fix string search with constant start position which previously could lead to memory corruption. (#61547 by Antonio Andelic via #61572)
  • Fix crash in multiSearchAllPositionsCaseInsensitiveUTF8 when specifying incorrect UTF-8 sequence. Example: #61714. (#61749 by pufit via #61854)
  • Fixed a bug in zero-copy replication (an experimental feature) that could cause The specified key does not exist errors and data loss after REPLACE/MOVE PARTITION. A similar issue might happen with TTL-moves between disks. (#54193 by Alexander Tokmakov via #62898)
  • Fix the ATTACH query with the ON CLUSTER clause when the database does not exist on the initiator node. Closes #55009. (#61365 by Nikolay Degterinsky via #61964)
  • Fix data race between MOVE PARTITION query and merges resulting in intersecting parts. (#61610 by János Benjamin Antal via #62527)
  • Fix skipping escape sequence parsing errors during JSON data parsing while using input_format_allow_errors_num/ratio settings. (#61883 by Kruglov Pavel via #62238)
  • Fix segmentation fault when using Hive table engine. Reference #62154, #62560. (#62578 by Nikolay Degterinsky via #62673)
  • Setting server_name might help with recently reported SSL handshake error when connecting to MongoDB Atlas: Poco::Exception. Code: 1000, e.code() = 0, SSL Exception: error:10000438:SSL routines:OPENSSL_internal:TLSV1_ALERT_INTERNAL_ERROR. (#63122 by Alexander Gololobov via #63172)
  • The wire protocol version check for MongoDB used to try accessing "config" database, but this can fail if the user doesn't have permissions for it. The fix is to use the database name provided by user. (#63126 by Alexander Gololobov via #63164)
  • Fixes #59989: runs init scripts when force-enabled or when no database exists, rather than the inverse. (#59991 by jktng via #64422)
  • Fix "Invalid storage definition in metadata file" for parameterized views. (#60708 by Azat Khuzhin via #64016)
  • Fix the issue where the function addDays (and similar functions) reports an error when the first parameter is DateTime64. (#61561 by Shuai li via #63456)
  • Fix crash with untuple and unresolved lambda. (#63131 by Raúl Marín via #63289)
  • Fix X-ClickHouse-Timezone header returning wrong timezone when using session_timezone as query level setting. (#63377 by Andrey Zvonov via #63512)
  • query_plan_remove_redundant_distinct can break queries with WINDOW FUNCTIONS (with allow_experimental_analyzer is on). Fixes #62820. (#63776 by Igor Nikonov via #63902)
  • Deserialize untrusted binary inputs in a safer way. (#64024 by Robert Schulze via #64104)
  • Prevent LOGICAL_ERROR on CREATE TABLE as MaterializedView. (#64174 by Raúl Marín via #64265)
  • Fixed memory possible incorrect memory tracking in several kinds of queries: queries that read any data from S3, queries via http protocol, asynchronous inserts. (#64844 by Anton Popov via #64867)
  • Fix possible abort on uncaught exception in ~WriteBufferFromFileDescriptor in StatusFile. (#64206 by Kruglov Pavel via #65351)
  • Fix crash on destroying AccessControl: add explicit shutdown. (#64993 by Vitaly Baranov via #66037)
  • Fixed bug in MergeJoin. Column in sparse serialisation might be treated as a column of its nested type though the required conversion wasn't performed. (#65632 by Nikita Taranov via #65782)
  • For queries that read from PostgreSQL, cancel the internal PostgreSQL query if the ClickHouse query is finished. Otherwise, ClickHouse query cannot be canceled until the internal PostgreSQL query is finished. (#65771 by Maksim Kita via #65926)
  • Fix a bug in short circuit logic when old analyzer and dictGetOrDefault is used. (#65802 by jsc0218 via #65822)
  • Fixed a bug in ZooKeeper client: a session could get stuck in unusable state after receiving a hardware error from ZooKeeper. For example, this might happen due to "soft memory limit" in ClickHouse Keeper. (#66140 by Alexander Tokmakov via #66449)
  • Correctly track memory for Allocator::realloc. (#66548 by Antonio Andelic via #66717)
  • Fix bug with session closing in Keeper. (#65735 by Antonio Andelic via #65913)
  • Fix data race in S3::ClientCache. (#66644 by Konstantin Morozov via #66853)

Improvement

Build/Testing/Packaging Improvement

CI Fix or Improvement (changelog entry is not required))

NO CL CATEGORY

NOT FOR CHANGELOG / INSIGNIFICANT

Build report

Packages

Available for both AMD64 and Aarch64 from https://builds.altinity.cloud/ as either .deb, .rpm, or .tgz

Docker images

Available for both AMD64 and Aarch64: altinity/clickhouse-server/23.8.16.41.altinitystable

Contributors

ilejn, azat, and 7 other contributors
Assets 2
Loading