diff --git a/.gitignore b/.gitignore
index 7af911b..dda8f97 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,3 @@
 SOURCES/postgresql-15.17.tar.bz2
-SOURCES/postgresql-16.13.tar.bz2
+SOURCES/postgresql-16.14.tar.bz2
 SOURCES/postgresql-setup-8.9.tar.gz
diff --git a/.postgresql.metadata b/.postgresql.metadata
index cca86c1..3651b5a 100644
--- a/.postgresql.metadata
+++ b/.postgresql.metadata
@@ -1,3 +1,3 @@
 09a3926425707ffcf1dd7a5bae8869f921659c13 SOURCES/postgresql-15.17.tar.bz2
-b66b3bf5bf717f37371dc3fd8de8831d1f26dd40 SOURCES/postgresql-16.13.tar.bz2
+ec6b347c6ae81b9ae9bbbee4a553304aaaa07b65 SOURCES/postgresql-16.14.tar.bz2
 25a05ef36218b1de80d8eeb55f4b4e0b723bd7f6 SOURCES/postgresql-setup-8.9.tar.gz
diff --git a/SOURCES/postgresql-16.13.tar.bz2.sha256 b/SOURCES/postgresql-16.13.tar.bz2.sha256
deleted file mode 100644
index 017f6bc..0000000
--- a/SOURCES/postgresql-16.13.tar.bz2.sha256
+++ /dev/null
@@ -1 +0,0 @@
-dc2ddbbd245c0265a689408e3d2f2f3f9ba2da96bd19318214b313cdd9797287  postgresql-16.13.tar.bz2
diff --git a/SOURCES/postgresql-16.14.tar.bz2.sha256 b/SOURCES/postgresql-16.14.tar.bz2.sha256
new file mode 100644
index 0000000..35d546d
--- /dev/null
+++ b/SOURCES/postgresql-16.14.tar.bz2.sha256
@@ -0,0 +1 @@
+f6d077142737920858ce958ccdb75c6ee137a63b5b0853c70693d401ac7e3471  postgresql-16.14.tar.bz2
diff --git a/SPECS/postgresql.spec b/SPECS/postgresql.spec
index 70abdac..b86abb2 100644
--- a/SPECS/postgresql.spec
+++ b/SPECS/postgresql.spec
@@ -62,7 +62,7 @@
 Summary: PostgreSQL client programs
 Name: postgresql
 %global majorversion 16
-Version: %{majorversion}.13
+Version: %{majorversion}.14
 Release: 1%{?dist}
 
 # The PostgreSQL license is very similar to other MIT licenses, but the OSI
@@ -1216,6 +1216,10 @@ make -C postgresql-setup-%{setup_version} check
 
 
 %changelog
+* Wed May 28 2026 Filip Janus <fjanus@redhat.com> - 16.14-1
+- Update to 16.14
+- Fix CVE-2026-6478
+
 * Fri Feb 27 2026 Filip Janus <fjanus@redhat.com> - 16.13-1
 - Update to 16.13
 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input