Released: 12 Nov 2026
Windows OpenSSL bundling
- On Windows, EPAS 16.16.0 is bundled with OpenSSL 3.5.9.
Extension compatibility
Extensions released on or after November 12, 2026, are compatible only with server versions released on or after November 12, 2026.
EDB Postgres Advanced Server 16.16.0 includes the following enhancements and bug fixes:
| Type | Description | Addresses |
|---|---|---|
| Upstream merge | Merged with community PostgreSQL 16.16. See the PostgreSQL 16.16 release notes for more information. | |
| Security fix | This release includes the following upstream security fixes from PostgreSQL: CVE-2026-6460, CVE-2026-6467, CVE-2026-14661, CVE-2026-16237, CVE-2026-16240, CVE-2026-18447, CVE-2026-116303, CVE-2026-116304, CVE-2026-116306, CVE-2026-116307, CVE-2026-116308, CVE-2026-116309, CVE-2026-116310, CVE-2026-116311, CVE-2026-116312, CVE-2026-116313, CVE-2026-116314, CVE-2026-116315, CVE-2026-116316, CVE-2026-116317, CVE-2026-116318, CVE-2026-116319, CVE-2026-116320, CVE-2026-116321, CVE-2026-116322, CVE-2026-116323, CVE-2026-116325, CVE-2026-116326, CVE-2026-116327, CVE-2026-116328, CVE-2026-116329, CVE-2026-116330, CVE-2026-116331, CVE-2026-116332, CVE-2026-116333, CVE-2026-116335, CVE-2026-116336, CVE-2026-120139, CVE-2026-120141, CVE-2026-120142, CVE-2026-120143, CVE-2026-120144, CVE-2026-120145, CVE-2026-120146, CVE-2026-120147, CVE-2026-120148, CVE-2026-120149, CVE-2026-120150, CVE-2026-120151, CVE-2026-120152, CVE-2026-120153, and CVE-2026-120154. | |
| Bug fix | dblink_oci no longer sends IS [NOT] DISTINCT FROM predicates to Oracle, which rejects them with ORA-00908. EPAS now evaluates them locally. | |
| Bug fix | Fixed ALTER TABLE ... ADD PARTITION so a new partition's privileges get the correct grantor when its owner differs from the root table's owner. Before, a later REVOKE on the partition could silently fail and leave the revoked role with access. | #61718 |
| Bug fix | Fixed the error cache lookup failed for type 0 when selecting an EXCEPTION declared in a package (SELECT pkg.exc). The query now resolves as it would for any non-variable name. | |
| Bug fix | Fixed a potential crash or incorrect behavior when checking access to private package variables, caused by reading a catalog cache entry after it had been released. | |
| Bug fix | Fixed incorrect --help text in edb-psql and EDB*Wrap. | |
| Bug fix | DBMS_PIPE now encrypts message payloads on disk when Transparent Data Encryption (TDE) is enabled. Before, they were written in cleartext. | |
| Change | EDB Postgres Advanced Server RPM packages create the enterprisedb service account declaratively through systemd-sysusers (sysusers.d) instead of in package scriptlets, starting with 16.15.0. The packaged sysusers.d file can create a local enterprisedb user at boot, before Active Directory or LDAP responds. The local user then takes precedence over the directory user, and the database service fails to start. Hosts that use a local service account, or that stay on earlier minor versions, aren't affected. If the enterprisedb user is managed by Active Directory (sssd or winbind) or LDAP on RHEL or SLES, mask the packaged sysusers.d file before you install or upgrade. See Installing on hosts where the enterprisedb user is managed by AD or LDAP. |
See Limitations for known limitations in this release.