diff --git a/.gitignore b/.gitignore
index 7af911b..dda8f97 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,3 @@
 SOURCES/postgresql-15.17.tar.bz2
-SOURCES/postgresql-16.13.tar.bz2
+SOURCES/postgresql-16.14.tar.bz2
 SOURCES/postgresql-setup-8.9.tar.gz
diff --git a/.postgresql.metadata b/.postgresql.metadata
index cca86c1..3651b5a 100644
--- a/.postgresql.metadata
+++ b/.postgresql.metadata
@@ -1,3 +1,3 @@
 09a3926425707ffcf1dd7a5bae8869f921659c13 SOURCES/postgresql-15.17.tar.bz2
-b66b3bf5bf717f37371dc3fd8de8831d1f26dd40 SOURCES/postgresql-16.13.tar.bz2
+ec6b347c6ae81b9ae9bbbee4a553304aaaa07b65 SOURCES/postgresql-16.14.tar.bz2
 25a05ef36218b1de80d8eeb55f4b4e0b723bd7f6 SOURCES/postgresql-setup-8.9.tar.gz
diff --git a/SOURCES/postgresql-16.13.tar.bz2.sha256 b/SOURCES/postgresql-16.13.tar.bz2.sha256
deleted file mode 100644
index 017f6bc..0000000
--- a/SOURCES/postgresql-16.13.tar.bz2.sha256
+++ /dev/null
@@ -1 +0,0 @@
-dc2ddbbd245c0265a689408e3d2f2f3f9ba2da96bd19318214b313cdd9797287  postgresql-16.13.tar.bz2
diff --git a/SOURCES/postgresql-16.14.tar.bz2.sha256 b/SOURCES/postgresql-16.14.tar.bz2.sha256
new file mode 100644
index 0000000..35d546d
--- /dev/null
+++ b/SOURCES/postgresql-16.14.tar.bz2.sha256
@@ -0,0 +1 @@
+f6d077142737920858ce958ccdb75c6ee137a63b5b0853c70693d401ac7e3471  postgresql-16.14.tar.bz2
diff --git a/SOURCES/postgresql.tmpfiles.d b/SOURCES/postgresql.tmpfiles.d
deleted file mode 100644
index 6c48e34..0000000
--- a/SOURCES/postgresql.tmpfiles.d
+++ /dev/null
@@ -1 +0,0 @@
-d /run/postgresql 0755 postgres postgres -
diff --git a/SPECS/postgresql.spec b/SPECS/postgresql.spec
index 70abdac..1bf6a67 100644
--- a/SPECS/postgresql.spec
+++ b/SPECS/postgresql.spec
@@ -62,7 +62,7 @@
 Summary: PostgreSQL client programs
 Name: postgresql
 %global majorversion 16
-Version: %{majorversion}.13
+Version: %{majorversion}.14
 Release: 1%{?dist}
 
 # The PostgreSQL license is very similar to other MIT licenses, but the OSI
@@ -84,9 +84,9 @@ Url: http://www.postgresql.org/
 %global service_name postgresql.service
 
 Source0: https://ftp.postgresql.org/pub/source/v%{version}/postgresql-%{version}.tar.bz2
+# The PDF file is generated by generate-pdf.sh, which see for comments
 Source3: https://ftp.postgresql.org/pub/source/v%{prevversion}/postgresql-%{prevversion}.tar.bz2
 Source4: Makefile.regress
-Source9: postgresql.tmpfiles.d
 Source10: postgresql.pam
 Source11: postgresql-bashprofile
 
@@ -110,6 +110,7 @@ Patch12: postgresql-no-libecpg.patch
 
 BuildRequires: make
 BuildRequires: gcc
+BuildRequires: lz4-devel, libzstd-devel
 BuildRequires: perl(ExtUtils::MakeMaker) glibc-devel bison flex gawk
 BuildRequires: perl(ExtUtils::Embed), perl-devel
 BuildRequires: perl(Opcode)
@@ -443,6 +444,15 @@ find . -type f -name Makefile -exec sed -i -e "s/SO_MAJOR_VERSION=\s\?\([0-9]\+\
 # remove .gitignore files to ensure none get into the RPMs (bug #642210)
 find . -type f -name .gitignore | xargs rm
 
+cat > postgresql.sysusers.conf <<EOF
+u postgres 26 'PostgreSQL Server' /var/lib/pgsql /bin/bash
+EOF
+
+cat > postgresql.tmpfiles.conf <<EOF
+d /run/postgresql 0755 postgres postgres -
+d /var/lib/pgsql 0700 postgres postgres -
+EOF
+
 
 %build
 # Avoid LTO on armv7hl as it runs out of memory
@@ -481,6 +491,8 @@ export CFLAGS
 
 common_configure_options='
 	--disable-rpath
+	--with-lz4
+	--with-zstd
 %if %beta
 	--enable-debug
 	--enable-cassert
@@ -609,6 +621,8 @@ upgrade_configure ()
 		--host=%{_host} \
 		--prefix=%prev_prefix \
 		--disable-rpath \
+		--with-lz4 \
+		--with-zstd \
 %if %beta
 		--enable-debug \
 		--enable-cassert \
@@ -695,12 +709,10 @@ install -d $RPM_BUILD_ROOT/etc/pam.d
 install -m 644 %{SOURCE10} $RPM_BUILD_ROOT/etc/pam.d/postgresql
 %endif
 
-# Create the directory for sockets.
-install -d -m 755 $RPM_BUILD_ROOT%{?_localstatedir}/run/postgresql
-
-# ... and make a tmpfiles script to recreate it at reboot.
 mkdir -p $RPM_BUILD_ROOT%{_tmpfilesdir}
-install -m 0644 %{SOURCE9} $RPM_BUILD_ROOT%{_tmpfilesdir}/postgresql.conf
+install -m 0644 postgresql.tmpfiles.conf $RPM_BUILD_ROOT%{_tmpfilesdir}/postgresql.conf
+
+install -m 0644 -D postgresql.sysusers.conf $RPM_BUILD_ROOT%{_sysusersdir}/postgresql.conf
 
 # PGDATA needs removal of group and world permissions due to pg_pwd hole.
 install -d -m 700 $RPM_BUILD_ROOT%{?_localstatedir}/lib/pgsql/data
@@ -1110,12 +1122,13 @@ make -C postgresql-setup-%{setup_version} check
 %{_mandir}/man1/postgresql-upgrade.*
 %{_sbindir}/postgresql-new-systemd-unit
 %{_tmpfilesdir}/postgresql.conf
+%{_sysusersdir}/postgresql.conf
 %{_unitdir}/*postgresql*.service
 %attr(700,postgres,postgres) %dir %{?_localstatedir}/lib/pgsql
 %attr(644,postgres,postgres) %config(noreplace) %{?_localstatedir}/lib/pgsql/.bash_profile
 %attr(700,postgres,postgres) %dir %{?_localstatedir}/lib/pgsql/backups
 %attr(700,postgres,postgres) %dir %{?_localstatedir}/lib/pgsql/data
-%attr(755,postgres,postgres) %dir %{?_localstatedir}/run/postgresql
+%ghost %attr(755,postgres,postgres) %dir %{?_rundir}/postgresql
 %if %pam
 %config(noreplace) /etc/pam.d/postgresql
 %endif
@@ -1216,36 +1229,45 @@ make -C postgresql-setup-%{setup_version} check
 
 
 %changelog
-* Fri Feb 27 2026 Filip Janus <fjanus@redhat.com> - 16.13-1
+* Wed May 28 2026 Filip Janus <fjanus@redhat.com> - 16.14-1
+- Update to 16.14
+- Fix CVE-2026-6478
+
+* Thu Feb 26 2026 Lukas Javorsky <ljavorsk@redhat.com> - 16.13-1
 - Update to 16.13
-- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
-- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
-- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
-- Resolves: RHEL-149371 RHEL-149404 RHEL-149338
+- Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006
 
-* Mon Dec 01 2025 Filip Janus <fjanus@redhat.com> - 16.11-1
-- Update to 16.11
-- Resolves: RHEL-128820 (CVE-2025-12818)
+* Mon Nov 10 2025 Filip Janus <fjanus@redhat.com> - 16.8-3
+- Add sysusers configuration for PostgreSQL 16
 
-* Mon Aug 18 2025 Filip Janus <fjanus@redhat.com> - 16.10-1
-- Update to 16.10
+* Tue Jul 22 2025 Filip Janus <fjanus@redhat.com> - 16.8-2
+- Add tmpfiles.d configuration
 
 * Tue Feb 18 2025 Filip Janus <fjanus@redhat.com> - 16.8-1
 - Update to 16.8
 - Fix CVE-2025-1094
 
-* Thu Nov 21 2024 Lukas Javorsky <ljavorsk@redhat.com> - 16.6-1
+* Fri Nov 22 2024 Lukas Javorsky <ljavorsk@redhat.com> - 16.6-1
 - Update to 16.6
 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979
 
-* Mon Aug 12 2024 Ales Nezbeda <anezbeda@redhat.com> - 16.4-1
+* Fri Aug 16 2024 Ales Nezbeda <anezbeda@redhat.com> - 16.4-2
+- Fix build on 16.4
+
+* Tue Aug 6 2024 Filip Janus <fjanus@redhat.com> - 16.4-1
 - Update to 16.4
-- Fix CVE-2024-7348
+
+* Tue Jul 30 2024 Filip Janus <fjanus@redhat.com> - 16.1-3
+- Remove /var/run/postgresql
+- Related: RHEL-51275
+
+* Mon Jul 15 2024 Filip Janus <fjanus@redhat.com> - 16.1-2
+- Enable lz4 and zstd support
 
 * Mon Jan 08 2024 Filip Janus <fjanus@redhat.com> - 16.1-1
 - Update to 16.1
 - Update upgrade server to 15.5
-- Resolves: RHEL-3635
+- Resolves: RHEL-3636
 
 * Mon Oct 09 2023 Filip Janus <fjanus@redhat.com> - 16.0-1
 - New postgresql stream - 16