Skip to content
Effectuer une recherche pour en savoir plus sur les produits et solutions InterSystems, les offres d'emploi, etc.

Advisory: Risk of Silent Wrong Results When Using New OFFSET Keyword in SQL Queries

Summary

Advisory ID
Product & Versions AffectedRisk Category & ScoreExplicit Requirements
DP-445340

InterSystems IRIS® data platform

InterSystems IRIS® for Health

HealthShare® Health Connect
versions 2025.1.0 – 2025.1.2, and 2025.2.0

Wrong Results: Low RiskUsing OFFSET keyword in SQL queries

Issue

In InterSystems IRIS versions 2025.1.0 – 2025.1.2 and 2025.2.0, SQL queries using the new OFFSET keyword to page through results may return wrong results when executed in parallel. This happens with both the ANSI-style OFFSET / FETCH syntax and the alternative LIMIT / OFFSET syntax. (This occurs because of an optimizer decision based on large table size or an explicit %PARALLEL hint.)

Queries that use LIMIT or FETCH without an OFFSET clause (or that use the preexisting TOP clause) are not affected.

The following queries are at risk because of this issue:

SELECT * FROM LargeTable OFFSET 50 FETCH 10
SELECT * FROM LargeTable LIMIT 10 OFFSET 50

The following queries are not affected by this issue because they explicitly avoid parallel execution:

SELECT * FROM %NOPARALLEL LargeTable OFFSET 50 FETCH 10
SELECT * FROM %NOPARALLEL LargeTable LIMIT 10 OFFSET 50

The following queries are not affected by this issue because they do not use the OFFSET keyword:

SELECT * FROM LargeTable LIMIT 10
SELECT * FROM LargeTable FETCH 10
SELECT TOP 10 * FROM LargeTable

Impact

This issue may cause InterSystems SQL to silently return wrong results. The incorrect results may manifest as either or both: missing rows that should have been returned and extra rows that do not match the paging criteria.

Resolution

The issue has been corrected in versions 2025.1.3, 2025.3.0, and any more recent version.

  • 2025.1.3 is scheduled for availability on January 28, 2026.
  • 2025.3.0 is scheduled for availability on November 19, 2025.
  • In the interim, customers who require the correction prior to these releases may request an ad hoc distribution for the fix (DP-445425) through the Worldwide Response Center. 
  • As a mitigation, customers have the option of modifying queries in either of the following ways:
    • Omit the OFFSET # clause and skip through the first # results manually
    • Include the %NOPARALLEL hint to ensure the query does not use parallelized execution

For More Information

If you have questions or need assistance, please contact the InterSystems Worldwide Response Center (WRC)

Latest Alerts & Advisories

10 Oct 2025
This alert supersedes the version issued on October 7, 2025. The original alert listed incorrect affected and fixed versions.
07 Oct 2025
Risk Category & Score Explicit Requirements DP-443396 InterSystems IRIS® data platform InterSystems IRIS® for Health HealthShare® Health Connect versions 2024.1.0 – 2024.1.4, 2024.2.0, 2024.3.0, and 2025.1.0, and 2025.1.1 HealthShare® Unified Care Record versions 2024.2 and 2025.1 Wrong Results: Low Risk Using Common Table Expressions in Dynamic SQL
07 Oct 2025
Risk Category & Score Explicit Requirements HSHC-5268 HealthShare® Health Connect and InterSystems IRIS® for Health versions 2025.1.1 Functional: Medium Risk Occurs when performing SDA3 -> FHIR transformations involving the Encounter resource.
07 Oct 2025
This alert has been corrected - please see: October 10 - Correction Notice: Updated Alert for DP-442892
30 Sep 2025
In InterSystems IRIS, InterSystems IRIS for Health, and HealthShare Health Connect, versions 2025.1.1 and 2025.2.0, the new “ Mirror Database Download” functionality does not include certain globals.
24 Sep 2025
Risk Category & Score Explicit Requirements DP-444551 InterSystems IRIS® data platform InterSystems IRIS® for Health HealthShare® Health Connect versions 2025.1.0, 2025.1.1, and 2025.2
03 Sep 2025
Risk Category & Score Explicit Requirements DP-442440 InterSystems IRIS ® data platform 2025.1.1.308.0 InterSystems IRIS for Health HealthShare® Health Connect Operational:
23 Jul 2025
InterSystems IRIS 2025.2 introduces the IRISSECURITY database, the new home for security data. Unlike IRISSYS, the previous home for security data, IRISSECURITY can be encrypted, which secures your sensitive data at rest. In a future version, IRISSECURITY will be mirrorable.
23 Jul 2025
InterSystems is pleased to announce the General Availability (GA) of the 2025.2 release of InterSystems IRIS® data platform. This is a Continuous Delivery (CD) release. Please note that the GA versions of InterSystems IRIS for Health™ and HealthShare® Health Connect™ 2025.2 are currently withheld due to mirroring limitations introduced by security updates (details below).
10 Jun 2025
Advisory ID Product & Versions Affected Risk Category & Score Explicit Requirements DP-439649 Products: