Skip to content

chore: bump ClickHouse to 26.8 - #4614

Open
aldy505 wants to merge 1 commit into
masterfrom
aldy505/chore/bump-clickhouse-26.8
Open

aldy505 wants to merge 1 commit into
masterfrom
aldy505/chore/bump-clickhouse-26.8

Conversation

@aldy505

@aldy505 aldy505 commented Nov 6, 2026

Copy link
Copy Markdown
Collaborator

SaaS is running 26.8 now. See getsentry/snuba#8646

Closes #4611

SaaS is running 26.8 now. See getsentry/snuba#8646

Closes #4611

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Want reviews to match your repository better? Bugbot Learning can learn team-specific rules from PR activity. A team admin can enable Learning in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit d77d42f. Configure here.

Comment thread docker-compose.yml
context: ./clickhouse
args:
BASE_IMAGE: "altinity/clickhouse-server:25.8.33.10002.altinitystable"
BASE_IMAGE: "clickhouse/clickhouse-server:26.8.36.3@sha256:d426d2f612e1e189c90f9a3f8dcd85a03c6851273833817a296bb327e63aa7a7"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ClickHouse 26.8 needs AVX2

Medium Severity

Official clickhouse/clickhouse-server 26.6+ is built for x86-64-v3 and requires AVX2. The installer still only checks SSE4.2, which Altinity 25.8 accepted, so hosts that pass install can then crash ClickHouse with an illegal instruction after this bump.

Additional Locations (1)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit d77d42f. Configure here.

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah this is a problem (cc @aminvakil)

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yep, this is a problem, do you want me to create a PR?

@aminvakil

Copy link
Copy Markdown
Collaborator

<allow_nullable_key>1</allow_nullable_key> should be moved under <merge_tree> section.

https://clickhouse.com/docs/reference/settings/merge-tree-settings:

MergeTree settings can be set in the merge_tree section of the server config file, or specified for each MergeTree table individually in the SETTINGS clause of the CREATE TABLE statement.

https://clickhouse.com/docs/reference/settings/merge-tree-settings/allow#allow_nullable_key

ClickHouse/ClickHouse#100332 this is the PR which prevents and The server now refuses to start (and rejects SYSTEM RELOAD CONFIG) when the server config contains an unknown top-level element, instead of silently ignoring it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: No status

Development

Successfully merging this pull request may close these issues.

[Security] ClickHouse CVE-2026-116366 — Vulnerable Altinity build in Sentry Self-Hosted

2 participants