-
A critical vulnerability CVE-2021-44228 in the Apache Log4j logging library was disclosed on Dec 9 2021. The project provided release
2.15.0
with a patch that mitigates the impact of this CVE. It was quickly found that the initial patch was insufficient, and additional CVEs CVE-2021-45046 and CVE-2021-44832 followed. These have been fixed in release2.17.1
. This release of Vitess,v11.0.1
, uses a version of Log4j below2.17.1
, for this reason, we encourage you to use versionv11.0.4
instead, to benefit from the vulnerability patches. -
An issue where the value of the
-force
flag is used instead of-keep_data
flag's value in v2 vreplication workflows (#9174) is known to be present in this release. A workaround is available in the description of issue #9174.
- Port #8422 to 11.0 branch #8744
- Handle subquery merging with references correctly #8661
- onlineddl Executor: build schema with DBA user #8667
- Backport to 11: Fixing a panic in vtgate with OLAP mode #8746
- Backport into 11: default to primary tablet if not set in VStream api #8766
- Refresh SrvVSchema after an ExternalizeVindex: was missing #8669
- Vitess Release 11.0.0 #8549
- Backport to 11: Updated Makefile do_release script to include godoc steps #8787
The release includes 18 commits (excluding merges) Thanks to all our contributors: @aquarapid, @askdba, @frouioui, @harshit-gangal, @rohit-nayak-ps, @shlomi-noach, @systay