2025 Changelog

ClickHouse release v25.3.10.19-lts (4209e0734dc) FIXME as compared to v25.3.9.72-lts (2bce1f2a33f)

Improvement

• Resolved CVE-2025-5318 in ClickHouse's libssh. #90814 (Robert Schulze).

Bug Fix (user-visible misbehavior in an official stable release)

• Backported in #90145: Prevent query masking rules from being incorrectly applied to DDL statements. #89272 (MikhailBurdukov).
• Backported in #90440: Fix inference of bad DateTime64 values from Strings in text formats in some cases. Resolves #89368. #90013 (Pavel Kruglov).
• Backported in #90969: Fix possible logical error during renaming and modifying the same Nested column in one ALTER. Resolves #90406. #90412 (Pavel Kruglov).
• Backported in #91031: Fix possible logical error during output of LowCardinality(Bool/Date32) in Arrow format. Resolves #83883. #90505 (Pavel Kruglov).
• Backported in #90910: Fix named collections hidden secrets to depend on display_secrets_in_show_and_select and format_display_secrets_in_show_and_select. #90765 (Pablo Marcos).
• Backported in #90848: Fix possible inconsistent state of shared data and dynamic paths in JSON that could lead to logical errors and unexpected results. #90816 (Pavel Kruglov).
• Backported in #91201: Fix high memory usage during reading JSON/Dynamic/Variant columns. #90907 (Pavel Kruglov).
• Backported in #91496: Fixes SummingMergeTree aggregation for Nested LowCardinality columns. #90927 (Ivan Babrou).
• Backported in #91408: ... Don't allow adaptive_write_buffer_initial_size set to 0. #91001 (Pedro Ferreira).
• Backported in #91069: Fix bug in JSON when path can be both in shared data and dynamic paths during sub-object reading in Compact parts with disabled write_marks_for_substreams_in_compact_parts. #91014 (Pavel Kruglov).
• Backported in #91316: Fix possible inconsistent dynamic structure during writing in compact parts that could lead to segfault. #91152 (Pavel Kruglov).
• Backported in #91334: Fix SYSTEM DROP FILESYSTEM CACHE ON CLUSTER. #91304 (Anton Ivashkin).
• Backported in #91456: Remove Sparse columns from header in merge algorithms. Closes #91377. #91396 (Pavel Kruglov).

Build/Testing/Packaging Improvement

• Backported in #91365: Bump libssh from 0.9.8 to master (0.11.3). This resolves https://github.com/advisories/GHSA-98qw-prqm-9f4p. #90985 (Govind R Nair).

NO CL ENTRY

• NO CL ENTRY: 'Revert "Resolve CVE-2025-5318"'. #90863 (Robert Schulze).

NOT FOR CHANGELOG / INSIGNIFICANT

• Backported in #90938: Make a separate IColumn method to take exact dynamic structure from a column. #87582 (Pavel Kruglov).
• Backported in #91727: CI: Fix tweak calculation in legacy version helper. #90950 (Max Kainov).