ClickHouse/docs/changelogs/v23.8.11.28-lts.md
2024-05-30 18:10:12 +02:00

2.9 KiB

sidebar_position sidebar_label
1 2024

2024 Changelog

ClickHouse release v23.8.11.28-lts (31879d2ab4) FIXME as compared to v23.8.10.43-lts (a278225bba)

Improvement

Bug Fix (user-visible misbehavior in an official stable release)

  • Backported in #60983: Fix buffer overflow that can happen if the attacker asks the HTTP server to decompress data with a composition of codecs and size triggering numeric overflow. Fix buffer overflow that can happen inside codec NONE on wrong input data. This was submitted by TIANGONG research team through our Bug Bounty program. #60731 (Alexey Milovidov).
  • Backported in #60986: Functions for SQL/JSON were able to read uninitialized memory. This closes #60017. Found by Fuzzer. #60738 (Alexey Milovidov).
  • Backported in #60816: Fix crash in arrayEnumerateRanked. #60764 (Raúl Marín).
  • Backported in #60837: Fix crash when using input() in INSERT SELECT JOIN. Closes #60035. #60765 (Kruglov Pavel).
  • Backported in #60911: Avoid segfault if too many keys are skipped when reading from S3. #60849 (Antonio Andelic).

NO CL ENTRY

NOT FOR CHANGELOG / INSIGNIFICANT