diff --git a/releases/release-8.5.8.md b/releases/release-8.5.8.md index 5e05241eaa091..46341cad4f0db 100644 --- a/releases/release-8.5.8.md +++ b/releases/release-8.5.8.md @@ -26,6 +26,7 @@ Quick access: [Quick start](https://docs.pingcap.com/tidb/v8.5/quick-start-with- - Improve TiCDC Kafka Sink verification to make it more lightweight and complete by avoiding startup-only work during verification, checking encoder dependencies such as Schema Registry for existing topics, and validating `replication-factor` only when TiCDC needs to create a topic [#5618](https://github.com/pingcap/ticdc/issues/5618) [#5720](https://github.com/pingcap/ticdc/issues/5720) @[3AceShowHand](https://github.com/3AceShowHand) - Reduce external storage client and connection usage for TiCDC Kafka Sinks with Claim-Check enabled by sharing a single `ClaimCheck` instance among all Encoders in the same Sink [#5719](https://github.com/pingcap/ticdc/issues/5719) @[3AceShowHand](https://github.com/3AceShowHand) - Simplify and unify TiCDC Kafka Sink error handling by standardizing the classification and wrapping of configuration, Admin API, and producer errors, making retry classification and troubleshooting easier [#5790](https://github.com/pingcap/ticdc/issues/5790) @[3AceShowHand](https://github.com/3AceShowHand) + - Upgrade TiDB, `golang.org/x/crypto`, AWS SDK, and other dependencies to mitigate known security vulnerabilities in TiCDC [#12775](https://github.com/pingcap/tiflow/issues/12775) [#5827](https://github.com/pingcap/ticdc/issues/5827) [#5693](https://github.com/pingcap/ticdc/issues/5693) [#5445](https://github.com/pingcap/ticdc/issues/5445) @[asddongmen](https://github.com/asddongmen) @[wk989898](https://github.com/wk989898) ## Bug fixes @@ -62,10 +63,11 @@ Quick access: [Quick start](https://docs.pingcap.com/tidb/v8.5/quick-start-with- - Fix the issue that TiKV might apply unnecessary write flow control during transient RocksDB compaction spikes [#19667](https://github.com/tikv/tikv/issues/19667) @[hbisheng](https://github.com/hbisheng) - Fix the issue that TiKV might permanently block Raft connections when PD temporarily returns a store-not-found error before the target store completes registration [#19980](https://github.com/tikv/tikv/issues/19980) @[LykxSassinator](https://github.com/LykxSassinator) - Fix the issue that external SST ingestion in TiKV no longer allows foreground writes, which increases write latency during ingestion [#19954](https://github.com/tikv/tikv/issues/19954) @[gengliqi](https://github.com/gengliqi) + - Fix potential security vulnerabilities in TiKV by upgrading Rust dependencies [#19931](https://github.com/tikv/tikv/issues/19931) @[hbisheng](https://github.com/hbisheng) + PD - - Fix the issue that PD `/metric/query` and `/metric/query_range` might be abused for SSRF or expose upstream response details @[rleungx](https://github.com/rleungx) + - Fix the issue that PD `/metric/query` and `/metric/query_range` might be abused for SSRF or expose upstream response details [#11081](https://github.com/tikv/pd/issues/11081) @[rleungx](https://github.com/rleungx) - Fix the issue that RU tokens might be allocated unevenly among TiDB instances in the same resource group when request rates are uneven, causing high RU wait duration and increased latency on high-demand instances [#9605](https://github.com/tikv/pd/issues/9605) @[JmPotato](https://github.com/JmPotato) - Fix the issue that PD GlobalConfig gRPC APIs might access etcd keys outside the intended namespace when a client specifies an arbitrary `ConfigPath` or a path-like configuration name [#11079](https://github.com/tikv/pd/issues/11079) @[rleungx](https://github.com/rleungx) - Fix the issue that PD might establish outbound gRPC connections to caller-selected addresses supplied through `pd-forwarded-host` instead of restricting forwarding targets to the current PD leader's advertised client URLs [#11070](https://github.com/tikv/pd/issues/11070) @[rleungx](https://github.com/rleungx) @@ -85,6 +87,10 @@ Quick access: [Quick start](https://docs.pingcap.com/tidb/v8.5/quick-start-with- - Fix the issue that BR log backup leaves stale GC safepoints after a log backup task is stopped, which might affect cleanup and safepoint management [#19832](https://github.com/tikv/tikv/issues/19832) @[Leavrth](https://github.com/Leavrth) - Fix the issue that BR cannot update the SST download rate limit correctly when multiple restore tasks run concurrently, which might cause one task's limit change not to take effect [#19454](https://github.com/tikv/tikv/issues/19454) @[Leavrth](https://github.com/Leavrth) + + DM + + - Fix potential vulnerabilities in DM by upgrading the OpenTelemetry and `kin-openapi` dependencies [#12637](https://github.com/pingcap/tiflow/issues/12637) @[GMHDBJD](https://github.com/GMHDBJD) + + TiCDC - Fix the issue that TiCDC might create duplicate dispatchers during maintainer failover, causing downstream write conflicts [#5083](https://github.com/pingcap/ticdc/issues/5083) @[hongyunyan](https://github.com/hongyunyan)