Merge PR "[AUTO-CHERRYPICK] Upgrade postgresql to 16.12 for CVE-2026-2003, CVE-2026-2004, CVE-2026-2005, CVE-2026-2006, CVE-2026-2007 [HIGH] - branch 3.0-dev" microsoft#15850

Signed-off-by: Kanishk Bansal <kanbansal@microsoft.com>
Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>
Co-authored-by: Kanishk Bansal <kanbansal@microsoft.com>
Co-authored-by: jslobodzian <joslobo@microsoft.com>

Author: 4 people

SPECS/postgresql/postgresql.signatures.json

@@ -1,6 +1,6 @@
 {
   "Signatures": {
     "postgresql.service": "2d209e10523c43e7011b4a85e9e32f5f5911a74a25012cdeaf5fdeb0a5664461",
-    "postgresql-16.11.tar.bz2": "6deb08c23d03d77d8f8bd1c14049eeef64aef8968fd8891df2dfc0b42f178eac"
+    "postgresql-16.12.tar.bz2": "b253ee949303ef5df00e24002600da4fb37e5ccfafa78718c6ea6a936b4d97f1"
   }
 }

SPECS/postgresql/postgresql.spec

@@ -2,15 +2,15 @@
 %define groupname postgres
 Summary:        PostgreSQL database engine
 Name:           postgresql
-Version:        16.11
+Version:        16.12
 Release:        1%{?dist}
 License:        PostgreSQL
 Vendor:         Microsoft Corporation
 Distribution:   Azure Linux
 Group:          Applications/Databases
 URL:            https://www.postgresql.org
 Source0:        https://ftp.postgresql.org/pub/source/v%{version}/%{name}-%{version}.tar.bz2
-Source1:	%{name}.service
+Source1:        %{name}.service
 
 # Common libraries needed
 BuildRequires:  krb5-devel
@@ -243,6 +243,10 @@ fi
 %{_unitdir}/%{name}.service
 
 %changelog
+* Fri Feb 13 2026 Kanishk Bansal <kanbansal@microsoft.com> - 16.12-1
+- Upgrade to 16.12 - for CVE-2026-2003, CVE-2026-2004, CVE-2026-2005, 
+  CVE-2026-2006, CVE-2026-2007
+
 * Fri Nov 14 2025 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 16.11-1
 - Auto-upgrade to 16.11 - for CVE-2025-12817, CVE-2025-12818
 

cgmanifest.json

@@ -21593,8 +21593,8 @@
         "type": "other",
         "other": {
           "name": "postgresql",
-          "version": "16.11",
-          "downloadUrl": "https://ftp.postgresql.org/pub/source/v16.11/postgresql-16.11.tar.bz2"
+          "version": "16.12",
+          "downloadUrl": "https://ftp.postgresql.org/pub/source/v16.12/postgresql-16.12.tar.bz2"
         }
       }
     },