Skip to content

chore(clickhouse): Use Altinity 25.8.33.10002 in CI and devservices - #8627

Merged
ElioDiNino merged 1 commit into
masterfrom
vuln-3216/clickhouse-25.8.33
Oct 29, 2026
Merged

ElioDiNino merged 1 commit into
masterfrom
vuln-3216/clickhouse-25.8.33

Conversation

@sentry-junior

@sentry-junior sentry-junior Bot commented Oct 29, 2026 •

Copy link
Copy Markdown
Contributor

Moves the default ClickHouse image in CI (ci.yml docker-deps lists), devservices and docker-compose.gcb.yml from Altinity 25.8.16.10001 to 25.8.33.10002.altinitystable. That's the first 25.8 build with the Brotli fix for CVE-2026-111497 and with rejection of the compromised eMudhra/emSign chains. Tracked in VULN-3216.

25.8.16.10001 stays in the clickhouse-versions matrix with 25.8.33 added next to it, because production still runs 25.8.16 and it's CLICKHOUSE_SERVER_MIN_VERSION. 25.8.33 already falls inside the min/max range, so snuba/migrations/clickhouse.py doesn't change. I also added 25.8.33 to supported_versions.rst.

This is a draft because it depends on getsentry/image-mirror#45. Until that merges and syncs, CI can't pull ghcr.io/getsentry/image-mirror-altinity-clickhouse-server:25.8.33.10002.altinitystable.

via Geoff Goldsmith.

--

View Junior Session [Sentry]

Co-Authored-By: Geoff Goldsmith <geoff.goldsmith@sentry.io>
@linear-code

linear-code Bot commented Oct 29, 2026

Copy link
Copy Markdown

VULN-3216

@geoffg-sentry
geoffg-sentry marked this pull request as ready for review October 29, 2026 14:51
@geoffg-sentry
geoffg-sentry requested a review from a team as a code owner October 29, 2026 14:51
@ElioDiNino
ElioDiNino merged commit 327c2e6 into master Oct 29, 2026
97 of 99 checks passed
@ElioDiNino
ElioDiNino deleted the vuln-3216/clickhouse-25.8.33 branch October 29, 2026 16:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants