Released on February 23, 2026.

Click here for a list of known issues (release notes).

The following table lists issues fixed in this release:

Tip: To search for specific issues, enter keywords in the relevant filter.
Component Issue Number Description
ABLTOOLS / Lang OCTA-79056

The StringStringMap (and to a lesser extent the StringKeyedMap) classes in OpenEdge.Core.Collections were given internal performance improvements through the new Progress.Collections.HashMap class, but introduced a regression in certain behaviors. Both classes were returning a collection of Values as a unique Set as opposed to a positionally and complete List of objects, which caused a disagreement in the Size of the map object contents as well as altering the expected results. Specific to the StringStringMap class when adding a new entry pair where the value may be the unknown value ?, the returned object would remain unknown which could break ABL code which always expected an object. In the case of the StringStringMap this should always be a String object (or technically, any ILongcharHolder object) allowing a developer to iterate over the map and access all expected properties of that object.

ADE OCTA-77750

Infinite loop with error 1388 when loading a delta df

ADE OCTA-79206

DF load reports error 91 on a non-user table named wdix

AdminServer OCTA-84175

The dbman command fails when the -host localhost parameter is not specified while trying to connect to the local AdminServer.

AdminServer OCTA-77063

CVE-2025-7389: Important Arbitrary File Read Security Update for OpenEdge AdminServer

Access to unsafe file methods through the OpenEdge AdminServer through RMI. The methods have been removed and the control for other encryption methods has been strengthened.

AdminServer OCTA-52529

Daily prolog database log file truncation at 00:00 is enabled by default when an OpenEdge database is started through the adminserver

DataServers OCTA-79613

The DataServer application could crash after a CRC error occurred as AVM continued the application execution even after this error. The AVM has been updated to stop execution of application after the first CRC error to prevent unsafe execution.

DB OCTA-86569

Online backup on the repl target crashed with “No return pbktbl in bmRemoveQAreaDbkey”

Generic JMS Adapter / PASOE / STAT OCTA-72563

BrokerConnect’s default logging for the Generic JMS Adapter logs frequent 'In SessionContainer()' messages for every JMS session.

Install OCTA-66511

Below registry key is not being created when using netsetup install.

« Computer\HKEY_LOCAL_MACHINE\SOFTWARE\PSC\PROGRESS\12.8 » , Key « WorkPath »

Install OCTA-85360

Client-Networking 32-bit MSI install fails to access mscomctl.ocx

Install OCTA-36907

During installation, the validation step for PowerShell version does not pass, causing the installer to fail even though the required version is present.

Install OCTA-83173

Installing OpenEdge 12.8.9 silently with a CUSTOM installer .ini file results in the installation failing with error:

Could not get the “javaHome” entry from the “International Settings” section of install.ini

Install OCTA-38897

Client Networking MSI package does not tailor install path to the short path notation.

Install OCTA-29310

When running the proupdt utility, the cursor does not begin in the first text field.

Install OCTA-80024

When applying the OpenEdge 12.8.8 patch on a system running Windows Server 2025, the ESAM component fails to install, displaying a Java InvocationTargetException (LAX error). This issue does not occur on Windows Server 2016 using the same Java version (Temurin 17.0.15+6) and installation steps.

Install OCTA-67814

The “Progress OpenEdge Management Service 12.2” Windows Service from an OpenEdge 12.2 64-bit installation is removed after uninstalling OpenEdge 12.2 32-bit.

Install OCTA-29312

The “Enter” key does not work in “proupdt” preventing updates for multiple licenses.

Lang OCTA-85245

A memory violation error can happen during the loading of the .df when trying to manage Progress.Lang.LockConflict.

Lang OCTA-84452

ABL hybrid objects that implement a .NET interface may cause the .NET bridge to leak a ProxyHandleHolder object.

Lang OCTA-81291

Accessing the root object directly for a ProDataGraph java open client may throw a NullPointerException.

Lang OCTA-81808

Breakpoints in a procedure or class file aren’t honored if the file is recompiled during a debugging session. This issue also prevents the debugger from setting breakpoints in OEUnit tests.

Lang OCTA-81003

COPY-LOB to/from a FILE can crash with path names greater than 255 characters long.

Lang OCTA-75378

A database crash can occur when a client creates an index key that exceeds the database's size limit.

Lang OCTA-82787

When compiling a program with the XREF-XML option, the error “Error in DataSet relations information during XREF-XML” can occur with very large dataset definitions.

Lang OCTA-84755

Report Engine crashes without displaying an error when exiting after generating a report.

Lang OCTA-85461

The AVM may crash when a widget which has a pending event trigger is deleted before the trigger is executed.

Lang OCTA-82803

The AVM may crash when the loading of a large number of records is interrupted by pressing Ctrl-C.

Lang OCTA-84562

The syntax check process may become unresponsive when it encounters an include argument that has not been defined.

Lang OCTA-82675

PNG images which use alpha channel transparency may not be rendered correctly when they’re displayed on image and button widgets.

Lang OCTA-78460

When loading r-code for a class, the AVM performs a case insensitive comparison of the class defined by the r-code against the expected class name from the caller, even when -casesensitiveclasses startup parameter is set to 1.

Lang OCTA-82774

The PASOE session crashes when any method of the CLIPBOARD system handle is queried or set.

Lang OCTA-82676

ProxyGen generates an incomplete WSDL document when processing multiple procedures that contain the same ProDataSet parameters, but with different XML-NODE-NAME / SERIALIZE-NAME values.

Lang OCTA-78585

ABL session may crash if the memCheck or DbCheck options are enabled on a shared-memory database connection.

Lang OCTA-79985

Contains() on KeyValuePair does not check both Key and Value objects

Lang / PASOE OCTA-80877

PASOE agent may crash when committing a transaction using a TRANSACTION-MODE AUTOMATIC procedure, if there are buffers in scope that have changes not committed, there are write triggers for those buffers, and one of the buffers is released in the process of running the write trigger on another buffer.

OEM OCTA-32401

Database lg archive and truncation properties (lgtruncatefrequency, lgtruncatetime) ignored when set under oem.

OEM OCTA-75746

While performing the upgrade, the user account for the Windows service Progress OpenEdge Management Service was reset back to Local Service instead of the user account that was set to run the service.

OEM OCTA-79864

When using the log file monitor via OpenEdge Explorer with a Polish PROMSGS file, only the first 50 rows load successfully. Attempting to load additional rows causes the interface to freeze with a continuous loading message.

PASOE OCTA-82495

Exception thrown “Failed to load JWS keys” starting a PASOE instance after publishing a web app.

PASOE OCTA-83333

PASOE 12.8.6 instance running on linux becomes randomly unresponsive and NoAvailableConnection exception messages are shown in [ablapp].[date].log

PASOE OCTA-70037

PASOE instance fails to start when using adding in the Spring Anonymous filter in Spring configuration files.

PASOE OCTA-78149

PASOE Web transport service reports as memory violation error 49 and crashes

PASOE OCTA-83049

The test_server_SHA256.pem and other test certificates in DLC\keys will expire in December 2025.

PASOE OCTA-80844

Warning 'Error retrieving bean with name 'jwkWebSelector'' can be seen in logs

PASOE OCTA-77147

OEAG generated client-principal properties are not transferred to the client request

PASOE OCTA-60980

4GLTrace logging adds additional 4GLTrace logging line with truncated data if the line is long.

PASOE OCTA-81469

OAuth2 authentication fails when the response from the JWK URL contains carriage returns and line feeds.

PASOE OCTA-77060

OpenEdge TLSv1.3 socket response is empty if the server response exceeds approximately 1.5 seconds.

PASOE OCTA-79895

PASOE ABL Session crashes when processing a TLS Session Ticket.

PDSOE OCTA-61962

PDSOE shows empty PAS logfiles in Log Viewer panel when changing the agent working directory from OEM

Security OCTA-80320

CVE-2025-8095: Unintended Use of OECH1 for Password/Secrets Protection

The OECH1 encoding algorithm, historically used to obfuscate administrative system passwords and sensitive configuration values, has been identified as cryptographically weak and unsuitable for enterprise use. OECH1 is permanently removed across the platform.

Security OCTA-84417

Release 12.8.11 mitigates the following third-party Security Vulnerabilities.

Vulnerability CVSS 3.1/4.0 Vulnerable Artifact Description OE Components
CVE-2020-13956 5.3/-- httpclient-4.5.10.jar Upgrade httpclient jar version from 4.5.10 to 5.4.4 in PDSOE 12.8.x. PDS for OE
CVE-2024-9143 4.3/-- OpenSSL - 3.0.15 Upgraded OpenSSL of version 3.0.16 SQL for OE
CVE-2025-52999 --/8.7 com.fasterxml.jackson.core.jar 2.14.1 We are upgrading the jar to latest 2.19.2 in 12.8.10 PDS for OE
CVE-2025-54988 8.4/-- Apache Tika - 2.9.1 Upgraded the tika jars to 3.2.2 PDS for OE

BDSA-2025-42323

BDSA-2018-5289

--/7.5

--/8.6

Mozilla Rhino 1.6R1 mozilla rhino jar is upgraded to latest version 1.8.0 PDS for OE
CVE-2025-10702 --/8.6 OpenEdge JDBC driver 5.1.4.000187 Upgraded jdbc driver with version 5.1.4.000189 SQL for OE

CVE-2025-49125

CVE-2025-48988

CVE-2025-53506

CVE-2025-52520

--/7.5

--/7.5

--/7.5

--/7.5

Tomcat-10.1.41 Upgraded to Apache Tomcat 10.1.44 PAS for OE

CVE-2024-12801

CVE-2024-12798

2.4/--

5.9/--

logback-core-1.4.14
Upgraded:
  • logback-access-common 2.0.6
  • logback-access-tomcat 2.0.6
  • logback-core to 1.5.18
  • logback-classic to 1.5.18
  • janino from 3.1.6 to 3.1.8
PAS for OE
CVE-2025-5878 6.9/7.3 esapi-java-legacy 2.5.2.0 Upgraded esapi-java-legacy 2.7.0.0 PAS for OE
CVE-2025-27636 --/5.6 camel-support-4.4.1.jar
Upgraded:
  • Spring 6.2.10
  • Camel 4.14.0
  • Shiro 2.0.5
PAS for OE, OEE/OEM, AdminServer
SQL OCTA-82623

Getting “SYSTEM ERROR related to idxcheck on PUB._SQL_Properties, _Idxsqlproperties in db.lg after running idxcheck utility where AUS (Autonomous Update Statistics) was already enabled.

SQL OCTA-83136

Getting record validation failure on the data inserted in pub.”_SQL_Properties” and pub.”_sysstatuse” tables using AUS (Autonomous Update Statistics) feature.

SQL OCTA-83367

Upgrading JDBC driver containing fix for a security vulnerability of CVSS score 8.6 along with other memory leak and deadlock related issues with DataDirect JDBC driver.

SQL OCTA-81248

OE SQL Server crashes when UDF receives null as an argument and it also runs SQL queries and processes the results.

SQL OCTA-81772

A user-defined function (UDF) gives the incorrect output if the call to the first row produces a null value, then calls for the rest of the rows produce the same value.