ClickHouse view security, QEMU CVE fixes, and database hardening

Security work dominated Databases and Infrastructure activity, with ClickHouse tightening view and secret handling while QEMU merged a websocket denial-of-service fix. Parallel threads advanced QEMU device modeling and PostgreSQL overflow and backup verification behavior.

ClickHouse hardens DEFINER and NONE view security barriers

ClickHouse developers addressed security barrier gaps in DEFINER and NONE views so that additional_table_filters and row-policy predicate pushdown cannot bypass intended protections. The changes close paths that could otherwise expose restricted rows through view expansion. Readers maintaining multi-tenant or policy-enforced ClickHouse deployments should treat the fixes as material to access-control integrity.

QEMU merges websocket DoS fix and AF_ALG deprecation

A thirteen-patch pull for QEMU incorporates fixes for a websocket denial-of-service issue tracked as CVE-2026-84788 along with deprecation of the AF_ALG crypto backend. The series lands under the misc fixes umbrella from the qemu-devel list. Operators running QEMU with websocket consoles or the AF_ALG path need the update for both availability and forward compatibility.

QEMU links QOM and qdev properties to QAPI schema types

A seventy-five-patch series proposes associating QOM and qdev properties with QAPI schema types to improve introspection across core infrastructure. The work touches many files and aims to make device and object properties more uniformly discoverable. Contributors and downstream tooling authors who rely on QEMU machine and device metadata have a large surface to review.

QEMU RFC adds Secure state to SMMUv3

An RFC v5 series of twenty-eight patches extends the SMMUv3 model with Secure state support for ARM IOMMU emulation. Five participants are actively reviewing the core changes. Accurate Secure-state behavior matters for anyone modeling TrustZone or secure-world DMA isolation in QEMU.

PostgreSQL discusses overflow checks for SUM of small integers

Hackers debated adding overflow detection to SUM(int2) and SUM(int4), which currently can silently wrap the int8 accumulator while parallel combine functions raise errors. The inconsistency surfaces under parallel plans and can hide arithmetic failure. Application authors depending on exact aggregate results on small integer columns should watch the outcome.

PostgreSQL improves truncated compressed backup detection

A patchset fixes pg_verifybackup so it reliably detects truncated zstd, gzip, and lz4 compressed backups that previously slipped through. Review focused on correct failure signaling and accompanying tests. Backup operators who rely on compressed base backups gain a clearer integrity check against incomplete archives.

QEMU RFC models Raspberry Pi Pico and RP2040

A single-author RFC v3 posts thirty-six patches that add a Raspberry Pi Pico and RP2040 machine model plus peripheral support to QEMU. The series targets hobbyist and embedded ARM development workflows. Developers who need cycle-accurate or peripheral-level emulation of the RP2040 have new code to evaluate.

ClickHouse masks secrets in backup and Azure SHOW CREATE paths

A ClickHouse pull request extends secret masking to SHOW CREATE DATABASE output for Backup database duplicate-definition errors and Azure table-engine overrides. Three participants iterated on covering additional leak paths. The change reduces accidental credential exposure in diagnostic and schema-dump workflows.