ClickHouse
Databases · products/clickhouse.yaml · RSS
Latest 26.9.24.8 Oct 21, 2026
Lifecycle
| Branch | Latest | Released | End of life |
|---|---|---|---|
| 26.9 | 26.9.24.8 | Sep 21, 2026 | — · maintained |
| 26.8 LTS | 26.8.33.10 | Aug 27, 2026 | Aug 27, 2027 · maintained |
| 26.7 | 26.7.36.9 | Jul 22, 2026 | — · maintained |
| 26.6 | 26.6.8.7 | Jun 25, 2026 | Sep 21, 2026 · ended |
| 26.5 | 26.5.7.64 | May 21, 2026 | Aug 27, 2026 · ended |
| 26.4 | 26.4.5.143 | May 5, 2026 | Jul 22, 2026 · ended |
| 26.3 LTS | 26.3.58.5 | Mar 26, 2026 | Mar 26, 2027 · maintained |
| 26.2 | 26.2.19.43 | Feb 27, 2026 | May 21, 2026 · ended |
| 26.1 | 26.1.12.23 | Jan 30, 2026 | May 5, 2026 · ended |
| 25.12 | 25.12.11.4 | Dec 18, 2025 | Mar 26, 2026 · ended |
| 25.11 | 25.11.9.34 | Nov 27, 2025 | Feb 27, 2026 · ended |
| 25.10 | 25.10.7.6 | Nov 1, 2025 | Jan 30, 2026 · ended |
| 25.9 | 25.9.7.56 | Sep 27, 2025 | Dec 18, 2025 · ended |
| 25.8 LTS | 25.8.33.6 | Aug 29, 2025 | Aug 29, 2026 · ended |
| 25.7 | 25.7.8.71 | Jul 29, 2025 | Nov 1, 2025 · ended |
| 25.6 | 25.6.13.41 | Jun 26, 2025 | Sep 27, 2025 · ended |
| 25.5 | 25.5.11.15 | May 22, 2025 | Aug 29, 2025 · ended |
| 25.4 | 25.4.13.22 | Apr 22, 2025 | Jul 29, 2025 · ended |
| 25.3 LTS | 25.3.14.14 | Mar 20, 2025 | Mar 20, 2026 · ended |
| 25.2 | 25.2.2.39 | Feb 28, 2025 | May 22, 2025 · ended |
| 25.1 | 25.1.8.25 | Jan 28, 2025 | Apr 22, 2025 · ended |
Recent releases
breakingBackported in: Remove object addresses from NATS, io_uring and HDFS messages. (Raúl Marín).
breakingBackported in: Remove object addresses from logical error messages. (Raúl Marín).
breakingBackported in: CREATE TABLE x AS src inherits the credentials embedded in the engine of src, which are masked in SHOW CREATE TABLE. It now requires the SELECT privilege on src when the inherited definition can carry credentials, instead of only SHOW COLUMNS. (Yarik Briukhovetskyi).
breakingBackported in: Overriding a key that is stored in a named collection now requires SHOW NAMED COLLECTIONS SECRETS on that collection. This also applies to overrides through an alias (including flat kafka_* settings over nested kafka.* keys), through a SETTINGS clause of a table engine or table…
securityBackported in: Update the vendored expat to 2.9.0, fixing a denial of service through a crafted backup manifest during RESTORE (CVE-2026-66046) and the other 2.8.3–2.9.0 security fixes. (Actuele AI).
securityBackported in: Update mongo-c-driver to 2.5.5, fixing an out-of-bounds write during MongoDB connection monitoring reconnects (CVE-2026-96746). (Actuele AI).
Security advisories
7.5 CVE-2025-1385 CVE-2025-1385- Fail input validation in clickhouse-library-bridge API could lead to RCE
high CVE-2024-6873 Specially crafted request could caused undefined behavior which may lead to Remote Code Execution.
5.9 CVE-2023-48298 Unauthenticated Integer underflow leading to stack overflow in FPC codec decompression