v26.9.9.28-stableFrom commit messages
Release v26.9.9.28-stable
Changed 5
- Disable statistics pruning in case of row level policy.
- Skip direct join when right table has row policy.
- Look through lossless conversions of indexed column and constants in text index.
- Keep flattened text index query postings out of shared postings cache.
- Avoid holding async-insert shard lock during pool admission.
Fixed 7
- Fix access checks in PREWHERE and indexHint() that used aliases.
- Fix NO_COMMON_TYPE error case with use_variant_as_common_type=0 for jemalloc fragmentation dashboard.
- Fix LOGICAL_ERROR on lambda over an Array(Tuple(...)).
- Fix crashes and wrong results: TTL check crash on constant arrayMap result, crash on deeply nested Field in binary encoded type, crash when reading ORC file whose root type is not struct, crash on JSON-AST projection with argument-less function, and crash and wrong result of convert_query_to_cnf when filter uses alias twice.
- Fix server crash on null logs_queue dereference in OwnSplitChannel::log.
- Prevent stale OpenSSL errors from breaking asynchronous TLS connections.
- Undo filesystem cache reservation when key directory cannot be created.
Security 4
- Hide queue engine secrets written with the legacy s3queue_ prefix, credentials in NATS/RabbitMQ addresses, XDBC connection strings and URL settings, HTTP headers of HTTP dictionary sources, and secret arguments in EXPLAIN AST output.
- Fix ssl_certificate authentication bypass via embedded NUL byte in certificate CN.
- Fix CREATE OR REPLACE bypassing the drop privilege of the replaced table via Replicated databases and ON CLUSTER.
- Add more path validations.