Released: 12 Nov 2026
Windows OpenSSL bundling
- On Windows, EPAS 18.7.0 is bundled with OpenSSL 3.5.9.
Extension compatibility
Extensions released on or after November 12, 2026, are compatible only with server versions released on or after November 12, 2026.
EDB Postgres Advanced Server 18.7.0 includes the following enhancements and bug fixes:
| Type | Description | Addresses |
|---|---|---|
| Upstream merge | Merged with community PostgreSQL 18.7. See the PostgreSQL 18.7 release notes for more information. | |
| Security fix | This release includes the following upstream security fixes from PostgreSQL: CVE-2026-6460, CVE-2026-6467, CVE-2026-14661, CVE-2026-16237, CVE-2026-16240, CVE-2026-18447, CVE-2026-116303, CVE-2026-116304, CVE-2026-116306, CVE-2026-116307, CVE-2026-116308, CVE-2026-116309, CVE-2026-116310, CVE-2026-116311, CVE-2026-116312, CVE-2026-116313, CVE-2026-116314, CVE-2026-116315, CVE-2026-116316, CVE-2026-116317, CVE-2026-116318, CVE-2026-116319, CVE-2026-116320, CVE-2026-116321, CVE-2026-116322, CVE-2026-116323, CVE-2026-116325, CVE-2026-116326, CVE-2026-116327, CVE-2026-116328, CVE-2026-116329, CVE-2026-116330, CVE-2026-116331, CVE-2026-116332, CVE-2026-116333, CVE-2026-116335, CVE-2026-116336, CVE-2026-120139, CVE-2026-120141, CVE-2026-120142, CVE-2026-120143, CVE-2026-120144, CVE-2026-120145, CVE-2026-120146, CVE-2026-120147, CVE-2026-120148, CVE-2026-120149, CVE-2026-120150, CVE-2026-120151, CVE-2026-120152, CVE-2026-120153, and CVE-2026-120154. | |
| Bug fix | dblink_oci no longer sends IS [NOT] DISTINCT FROM predicates to Oracle, which rejects them with ORA-00908. EPAS now evaluates them locally. | |
| Bug fix | Fixed ALTER TABLE ... ADD PARTITION so a new partition's privileges get the correct grantor when its owner differs from the root table's owner. Before, a later REVOKE on the partition could silently fail and leave the revoked role with access. | #61718 |
| Bug fix | Fixed the error cache lookup failed for type 0 when selecting an EXCEPTION declared in a package (SELECT pkg.exc). The query now resolves as it would for any non-variable name. | |
| Bug fix | Fixed a potential crash or incorrect behavior when checking access to private package variables, caused by reading a catalog cache entry after it had been released. | |
| Bug fix | Fixed incorrect --help text in edb-psql and EDB*Wrap. | |
| Bug fix | DBMS_PIPE now encrypts message payloads on disk when Transparent Data Encryption (TDE) is enabled. Before, they were written in cleartext. |