ClickHouse access fixes and PostgreSQL backup checks

ClickHouse developers closed several access-control and secret-leakage gaps while PostgreSQL hackers worked on backup verification and aggregate overflow handling. Containerd discussions covered sandbox startup performance and runtime classification side effects.

ClickHouse tightens DEFINER view security barriers

ClickHouse maintainers fixed security barriers for DEFINER and NONE views against additional_table_filters and row-policy predicate pushdown. The changes block privilege paths that could arise when those features interact with secured views. Operators who rely on row policies and filtered queries should treat the fixes as required hardening.

Hierarchical name access-check bypass fixed in ClickHouse

A pull request discussion identified an access-check bypass for hierarchical dotted database and table names in CREATE and RENAME, while DROP was already correct. The bypass was fixed with tests before merge. Deployments that use dotted names need the corrected checks to keep privilege boundaries intact.

PostgreSQL detects truncated compressed backups more reliably

A patchset on pgsql-hackers fixes pg_verifybackup failing to detect truncated zstd, gzip, and lz4 backups, with accompanying review and test discussion. The change strengthens integrity checks when compressed backup formats are in use. Sites that automate restore validation gain earlier failure detection on incomplete archives.

ClickHouse masks secrets in Backup SHOW CREATE paths

A pull request closes secret-leakage paths in Backup, Azure, S3, and File locators when those strings are formatted for query_log and errors. SHOW CREATE DATABASE on a Backup database no longer exposes credentials through those channels. Environments that log queries or surface errors to operators reduce credential exposure risk.

PostgreSQL sum of narrow integers and int8 overflow

Hackers discussed adding overflow checks to sum(int2) and sum(int4) because the int8 accumulator can wrap silently, while the combine function errors under parallel plans. The inconsistency can hide bad data in parallel queries. Authors who sum narrow integer columns may see stricter failure behavior if checks land.

containerd proposes async CNI setup for RunPodSandbox

A pull request proposes asynchronous CNI setup in RunPodSandbox to speed sandbox startup. Review flagged data races and stale sandbox store metadata. Faster pod starts matter on dense hosts, but race and metadata issues need resolution first.

ClickHouse closes row-count leak via DEFINER views

A pull request fixes a row-count leak through SQL SECURITY DEFINER views combined with parallel_replicas_custom_key on both analyzers. The leak could reveal information about protected data. Clusters that use parallel replicas with DEFINER views should apply the correction.

containerd debates expanding vmbasedRuntimes list

A thread debates expanding the vmbasedRuntimes list and notes side effects on SELinux labeling and port-forwarding logic. Broadening the classification can change security labeling and networking behavior. Runtime maintainers must weigh those interactions before extending the list.