Skip to content

26.3.60.20001 Altinity Antalya

Choose a tag to compare

@zvonand zvonand released this 29 Oct 22:04
c47f506

26.3.60.20001 Altinity Antalya (c47f506) as compared to v26.3.53.20001.altinityantalya (243187fe6a1d01e6fe932e904c10a25af2a34d4c)

Performance Improvements

  • Improve performance of the encrypt, decrypt, and halfMD5 functions by avoiding implicit per-row OpenSSL provider lookups in OpenSSL 3.x. (ClickHouse#99105 by @thevar1able via #2629)
  • Improve performance of the encrypt, decrypt, tryDecrypt, aes_encrypt_mysql, and aes_decrypt_mysql functions by up to an order of magnitude, recovering the performance lost in the BoringSSL to OpenSSL 3.x migration (24.4). (ClickHouse#107339 by @thevar1able via #2629)

Improvements

  • Hardening: certificate chains containing the compromised eMudhra intermediate CAs or the roots that issued them (emSign Root TLS CA - G3, emSign ECC Root CA - G3) are rejected even if the trust store of the operating system still trusts them. The CA certificates embedded into the binary (used only when the system has none) are updated from the Chromium root store. There is no security issue in typical use cases. (ClickHouse#127318 by @alexey-milovidov via #2697)

Bug Fixes (user-visible misbehavior in an official stable release)

  • Fix NOT_FOUND_COLUMN_IN_BLOCK in the native Parquet V3 reader (regression from ClickHouse#93542) when a PREWHERE had conjuncts sharing a common intermediate expression. (ClickHouse#107059 by @groeneai via #2624)
  • Fixed use_client_time_zone being ignored for DateTime/DateTime64 string literals interpreted on the server (asynchronous INSERT, SELECT literals). The client now propagates its local time zone as session_timezone when use_client_time_zone is enabled, so server-side parsing matches the synchronous INSERT path. (ClickHouse#109051 by @groeneai via #2628)
  • Fix a possible crash when querying the view over Distributed with enable_analyzer=0 (ClickHouse#123431 by @mkmkme via #2651)
  • Fix a bug where using aliases and row policies with enable_analyzer=0 could error out (ClickHouse#123436 by @mkmkme via #2654)
  • Updated the bundled brotli library from v1.2.0 to v1.2.1. The Brotli decoder now rejects malformed input that contains an invalid block switch, so such data fails with an error and is no longer processed. (ClickHouse#127810 by @robot-clickhouse-ci-2 via #2684)

CI Fixes or Improvements

Build report

Packages

Available for both AMD64 and Aarch64 from https://builds.altinity.cloud/#altinityantalya as either .deb, .rpm, or .tgz

Docker images

Available for both AMD64 and Aarch64: altinity/clickhouse-server:26.3.60.20001.altinityantalya

Full Changelog: 243187f...c47f506