Repository navigation
Releases
26.3.60.20002 Altinity Antalya
26.3.60.20002 Altinity Antalya as compared to v26.3.60.20001.altinityantalya
Critical Bug Fixes
- Fixed CVE-2026-116366
Packages
Available for both AMD64 and Aarch64 from https://builds.altinity.cloud/#altinityantalya as either .deb, .rpm, or .tgz
These binaries include additional changes whose source is temporarily withheld pending coordinated security disclosure. The public tag identifies the public source baseline and does not contain all changes used to build these binaries.
Docker images
Available for both AMD64 and Aarch64: altinity/clickhouse-server:26.3.60.20002.altinityantalya
26.3.60.10002 Altinity Stable
26.3.60.10002 Altinity Stable as compared to v26.3.60.10001.altinitystable
Critical Bug Fixes
- Fixed CVE-2026-116366
Packages
Available for both AMD64 and Aarch64 from https://builds.altinity.cloud/#altinitystable as either .deb, .rpm, or .tgz
These binaries include additional changes whose source is temporarily withheld pending coordinated security disclosure. The public tag identifies the public source baseline and does not contain all changes used to build these binaries.
Docker images
Available for both AMD64 and Aarch64: altinity/clickhouse-server:26.3.60.10002.altinitystable
25.8.33.20004 Altinity Antalya
25.8.33.20004 Altinity Antalya as compared to v25.8.33.20003.altinityantalya
Critical Bug Fixes
- Fixed CVE-2026-116366
Packages
Available for both AMD64 and Aarch64 from https://builds.altinity.cloud/#altinityantalya as either .deb, .rpm, or .tgz
These binaries include additional changes whose source is temporarily withheld pending coordinated security disclosure. The public tag identifies the public source baseline and does not contain all changes used to build these binaries.
Docker images
Available for both AMD64 and Aarch64: altinity/clickhouse-server:25.8.33.20004.altinityantalya
25.8.33.10003 Altinity Stable
25.8.33.10003 Altinity Stable as compared to v25.8.33.10002.altinitystable
Critical Bug Fixes
- Fixed CVE-2026-116366
Packages
Available for both AMD64 and Aarch64 from https://builds.altinity.cloud/#altinitystable as either .deb, .rpm, or .tgz
These binaries include additional changes whose source is temporarily withheld pending coordinated security disclosure. The public tag identifies the public source baseline and does not contain all changes used to build these binaries.
Docker images
Available for both AMD64 and Aarch64: altinity/clickhouse-server:25.8.33.10003.altinityantalya
26.3.60.20001 Altinity Antalya
26.3.60.20001 Altinity Antalya (c47f506) as compared to v26.3.53.20001.altinityantalya (243187fe6a1d01e6fe932e904c10a25af2a34d4c)
Performance Improvements
- Improve performance of the encrypt, decrypt, and halfMD5 functions by avoiding implicit per-row OpenSSL provider lookups in OpenSSL 3.x. (ClickHouse#99105 by @thevar1able via #2629)
- Improve performance of the encrypt, decrypt, tryDecrypt, aes_encrypt_mysql, and aes_decrypt_mysql functions by up to an order of magnitude, recovering the performance lost in the BoringSSL to OpenSSL 3.x migration (24.4). (ClickHouse#107339 by @thevar1able via #2629)
Improvements
- Hardening: certificate chains containing the compromised eMudhra intermediate CAs or the roots that issued them (
emSign Root TLS CA - G3,emSign ECC Root CA - G3) are rejected even if the trust store of the operating system still trusts them. The CA certificates embedded into the binary (used only when the system has none) are updated from the Chromium root store. There is no security issue in typical use cases. (ClickHouse#127318 by @alexey-milovidov via #2697)
Bug Fixes (user-visible misbehavior in an official stable release)
- Fix
NOT_FOUND_COLUMN_IN_BLOCKin the native Parquet V3 reader (regression from ClickHouse#93542) when aPREWHEREhad conjuncts sharing a common intermediate expression. (ClickHouse#107059 by @groeneai via #2624) - Fixed
use_client_time_zonebeing ignored forDateTime/DateTime64string literals interpreted on the server (asynchronousINSERT,SELECTliterals). The client now propagates its local time zone assession_timezonewhenuse_client_time_zoneis enabled, so server-side parsing matches the synchronousINSERTpath. (ClickHouse#109051 by @groeneai via #2628) - Fix a possible crash when querying the view over
Distributedwithenable_analyzer=0(ClickHouse#123431 by @mkmkme via #2651) - Fix a bug where using aliases and row policies with
enable_analyzer=0could error out (ClickHouse#123436 by @mkmkme via #2654) - Updated the bundled
brotlilibrary from v1.2.0 to v1.2.1. The Brotli decoder now rejects malformed input that contains an invalid block switch, so such data fails with an error and is no longer processed. (ClickHouse#127810 by @robot-clickhouse-ci-2 via #2684)
CI Fixes or Improvements
Build report
Packages
Available for both AMD64 and Aarch64 from https://builds.altinity.cloud/#altinityantalya as either .deb, .rpm, or .tgz
Docker images
Available for both AMD64 and Aarch64: altinity/clickhouse-server:26.3.60.20001.altinityantalya
Full Changelog: 243187f...c47f506
Contributors
Assets 2
26.3.60.10001 Altinity Stable
26.3.60.10001 Altinity Stable (f01425d) as compared to v26.3.53.10001.altinitystable (9446ac6622d0723467efe8f11bfa6dfff4f57c32)
Improvements
- Hardening: certificate chains containing the compromised eMudhra intermediate CAs or the roots that issued them (
emSign Root TLS CA - G3,emSign ECC Root CA - G3) are rejected even if the trust store of the operating system still trusts them. The CA certificates embedded into the binary (used only when the system has none) are updated from the Chromium root store. There is no security issue in typical use cases. (ClickHouse#127318 by @alexey-milovidov via #2696)
Bug Fixes (user-visible misbehavior in an official stable release)
- Fix a possible crash when querying the view over
Distributedwithenable_analyzer=0(ClickHouse#123431 by @mkmkme via #2650) - Fix a bug where using aliases and row policies with
enable_analyzer=0could error out (ClickHouse#123436 by @mkmkme via #2653) - Updated the bundled
brotlilibrary from v1.2.0 to v1.2.1. The new version rejects malformed Brotli streams with an invalid block switch instead of trying to decode them. (ClickHouse#127810 by @robot-clickhouse-ci-2 via #2683) - Fixed
ALTER MODIFY COLUMNfailing when converting aNullablecolumn to a different type with aDEFAULT(e.g.Nullable(UInt8)→String,LowCardinality(String), orArray(UInt8)). (ClickHouse#102156 by @il9ue via #2711)
CI Fixes or Improvements
- Stable 26.3 - skip 04651_system_sync_transaction_log_access with encrypted storage (#2645 by @CarlosFelipeOR)
- Stable 26.3 - CI parity from 26.8 (#2723 by @strtgbb)
Build report
Packages
Available for both AMD64 and Aarch64 from https://builds.altinity.cloud/#altinitystable as either .deb, .rpm, or .tgz
Docker images
Available for both AMD64 and Aarch64: altinity/clickhouse-server:26.3.60.10001.altinitystable
Full Changelog: 9446ac6...f01425d
Contributors
Assets 2
25.3.14.10002 Altinity Stable
25.3.14.10002 Altinity Stable (33e1427) as compared to v25.3.14.10001.altinitystable (5dc76dc3701d604f851081313ff23bbc8a702463)
Improvements
- Hardening: certificate chains containing the compromised eMudhra intermediate CAs or the roots that issued them (
emSign Root TLS CA - G3,emSign ECC Root CA - G3) are rejected even if the trust store of the operating system still trusts them. The CA certificates embedded into the binary (used only when the system has none) are updated from the Chromium root store. There is no security issue in typical use cases. (ClickHouse#127318 by @alexey-milovidov via #2708)
Bug Fixes (user-visible misbehavior in an official stable release)
- Fix a possible crash when querying the view over
Distributedwithenable_analyzer=0(ClickHouse#123431 by @mkmkme via #2648) - Fix a bug where using aliases and row policies with
enable_analyzer=0could error out (ClickHouse#123436 by @mkmkme via #2649) - Bump
brotlifrom v1.0.9 to v1.0.10; fix CVE-2026-111497 (#2691 by @zvonand)
Build/Testing/Packaging Improvements
CI Fixes or Improvements
Build report
Packages
Available for both AMD64 and Aarch64 from https://builds.altinity.cloud/#altinitystable as either .deb, .rpm, or .tgz
Docker images
Available for both AMD64 and Aarch64: altinity/clickhouse-server:25.3.14.10002.altinitystable
Full Changelog: 5dc76dc...33e1427
Contributors
Assets 2
24.8.14.10550 Altinity Stable
24.8.14.10550 Altinity Stable (77bb5f6) as compared to v24.8.14.10549.altinitystable (9626de1016c529cf7b01ccd17fc82cdcc9448a23)
Improvements
- Hardening: certificate chains containing the compromised eMudhra intermediate CAs or the roots that issued them (
emSign Root TLS CA - G3,emSign ECC Root CA - G3) are rejected even if the trust store of the operating system still trusts them. The CA certificates embedded into the binary (used only when the system has none) are updated from the Chromium root store. There is no security issue in typical use cases. (ClickHouse#127318 by @alexey-milovidov via #2705)
Bug Fixes (user-visible misbehavior in an official stable release)
- Bump
brotlifrom v1.0.9 to v1.0.10; fix CVE-2026-111497 (#2688 by @zvonand) - Fixed
ALTER MODIFY COLUMNfailing when converting aNullablecolumn to a different type with aDEFAULT(e.g.Nullable(UInt8)→String,LowCardinality(String), orArray(UInt8)) (ClickHouse#102156 by @il9ue via #2702)
Build report
Packages
Available for both AMD64 and Aarch64 from https://builds.altinity.cloud/#altinitystable as either .deb, .rpm, or .tgz
Docker images
Available for both AMD64 and Aarch64: altinity/clickhouse-server:24.8.14.10550.altinitystable
Full Changelog: 9626de1...77bb5f6
Contributors
Assets 2
25.8.33.20003 Altinity Antalya
25.8.33.20003 Altinity Antalya (d8b19fa) as compared to v25.8.33.20002.altinityantalya (872f7bf3881c674b5777e0169303bf754f7ee84a)
Performance Improvements
- Improves performance of fast queries with lots of parts in table (by optimizing
MarkRangesby usingdevectoroverdeque) (ClickHouse#86933 by @azat via #2638) - Up to 8x faster
SELECTqueries with heavy partition pruning on tables with 10K+ parts (ClickHouse#85535 by @jawm via #2640)
Improvements
- Hardening: certificate chains containing the compromised eMudhra intermediate CAs or the roots that issued them (
emSign Root TLS CA - G3,emSign ECC Root CA - G3) are rejected even if the trust store of the operating system still trusts them. The CA certificates embedded into the binary (used only when the system has none) are updated from the Chromium root store. There is no security issue in typical use cases. (ClickHouse#127318 by @alexey-milovidov via #2695)
Bug Fixes (user-visible misbehavior in an official stable release)
- Logical Error fixed if both Alias and original column are selected. (#2560 by @ilejn)
- Fixed a server crash when reading Parquet files with the native v3 reader and a
PREWHEREcondition returning a numeric type other thanUInt8. (#2571 by @mkmkme) - Fix incorrect query results when reading Parquet files with PREWHERE filters that compute expressions also used elsewhere in the query. (#2627 by @mkmkme)
- Fix a crash when reading Iceberg tables with equality delete files. If a column is nullable in the equality delete file but non-nullable in the table schema (or vice versa), the values read from the delete file were inserted into a column of a different type through an unchecked cast (a column type confusion), corrupting the column and crashing the server. (ClickHouse#109551 by @mstetsyuk via #2631)
- The usage of
ngram_bfindex on a non-UTF-8 data led to an uninitialized memory read, with values that could reside in the resulting index structure. Closes ClickHouse#92576. (ClickHouse#93663 by @alexey-milovidov via #2673) - Bump
brotlifrom v1.0.9 to v1.0.10; fix CVE-2026-111497 (#2693 by @zvonand) - Fixed
ALTER MODIFY COLUMNfailing when converting aNullablecolumn to a different type with aDEFAULT(e.g.Nullable(UInt8)→String,LowCardinality(String), orArray(UInt8)). (ClickHouse#102156 by @il9ue via #2710)
Build/Testing/Packaging Improvements
- Antalya 25.8 Backport of ClickHouse#91128 - Disable join_use_nulls for 03716_multiple_joins_using_top_level_identifier (#2569 by @CarlosFelipeOR)
- Update source upload to reduce amount of space needed. (#2635 by @MyroTk)
CI Fixes or Improvements
- Antalya 25.8 - bump actions version (#2563 by @strtgbb)
- Antalya 25.8 Backport of #2585 - Use local abseil for host protoc build (#2634 by @CarlosFelipeOR)
- Antalya 25.8 - Backport submodule cache from 26.8 (#2642 by @strtgbb)
- Antalya 25.8 - CI parity from 26.8 (#2719 by @strtgbb)
Build report
Packages
Available for both AMD64 and Aarch64 from https://builds.altinity.cloud/#altinityantalya as either .deb, .rpm, or .tgz
Docker images
Available for both AMD64 and Aarch64: altinity/clickhouse-server:25.8.33.20003.altinityantalya
Full Changelog: 872f7bf...d8b19fa
Contributors
Assets 2
25.8.33.10002 Altinity Stable
25.8.33.10002 Altinity Stable (2b3564e) as compared to v25.8.33.10001.altinitystable (f998c52e1ba9bfa0ef75e50f467ae99777b2c36d)
Performance Improvements
- Improves performance of fast queries with lots of parts in table (by optimizing
MarkRangesby usingdevectoroverdeque) (ClickHouse#86933 by @azat via #2637) - Up to 8x faster
SELECTqueries with heavy partition pruning on tables with 10K+ parts (ClickHouse#85535 by @jawm via #2639)
Improvements
- Hardening: certificate chains containing the compromised eMudhra intermediate CAs or the roots that issued them (
emSign Root TLS CA - G3,emSign ECC Root CA - G3) are rejected even if the trust store of the operating system still trusts them. The CA certificates embedded into the binary (used only when the system has none) are updated from the Chromium root store. There is no security issue in typical use cases. (ClickHouse#127318 by @alexey-milovidov via #2694)
Bug Fixes (user-visible misbehavior in an official stable release)
- The usage of
ngram_bfindex on a non-UTF-8 data led to an uninitialized memory read, with values that could reside in the resulting index structure. Closes ClickHouse#92576. (ClickHouse#93663 by @alexey-milovidov via #2672) - Bump
brotlifrom v1.0.9 to v1.0.10; fix CVE-2026-111497 (#2692 by @zvonand)
CI Fixes or Improvements
Build report
Packages
Available for both AMD64 and Aarch64 from https://builds.altinity.cloud/#altinitystable as either .deb, .rpm, or .tgz
Docker images
Available for both AMD64 and Aarch64: altinity/clickhouse-server:25.8.33.10002.altinitystable
Full Changelog: f998c52...2b3564e