October 21, 2020
This page lists additions and changes in v20.1.8 since v20.1.7.
- For a comprehensive summary of features in v20.1, see the v20.1 GA release notes.
- To upgrade to the latest production release of CockroachDB, see this article.
A denial-of-service (DoS) vulnerability is present in CockroachDB v20.1.0 - v20.1.10 due to a bug in protobuf. This is resolved in CockroachDB v20.1.11 and later releases. When upgrading is not an option, users should audit their network configuration to verify that the CockroachDB HTTP port is not available to untrusted clients. We recommend blocking the HTTP port behind a firewall.
For more information, including other affected versions, see Technical Advisory 58932.
Cockroach Labs has discovered a bug relating to incremental backups, for CockroachDB v20.1.0 - v20.1.13. If a backup coincides with an in-progress index creation (backfill), RESTORE, or IMPORT, it is possible that a subsequent incremental backup will not include all of the indexed, restored or imported data.
Users are advised to upgrade to v20.1.15 or later, which includes resolutions.
For more information, including other affected versions, see Technical Advisory 63162.
Get future release notes emailed to you:
Downloads
Docker image
$ docker pull cockroachdb/cockroach:v20.1.8
Bug fixes
- Fixed a bug where schema changes, which affect referenced tables, might not have propagated to other nodes. #55375
- Fixed a bug where inscrutable errors were returned on failed backup creation. #54968
- Fixed a bug where CockroachDB crashed when executing a query via the vectorized engine when most of the SQL memory (determined via
--max-sql-memorystartup argument) had already been reserved. #55458 - Fixed a bug where the
age()function did not normalize the duration for large day or H:M:S values in the same way PostgreSQL does. #55527 - Fixed a bug where CockroachDB did not account for all the memory used by the vectorized hash aggregation which could lead to an OOM crash. #55571
- Fixed a bug where using the
MIN/MAXaggregates in a prepared statement did not report the correct data type size. #55621
Contributors
This release includes 8 merged PRs by 6 authors. We would like to thank the following contributors from the CockroachDB community:
- kev (first-time contributor)
Was this helpful?
