PostgreSQL:
2016-10-01

This release fixes a security issue where crafted object names containing special characters could have been used to execute commands with superuser privileges the next time a superuser executes pg_dumpall or other routine maintenance operations.

CVE-2016-5424
postgresql-client-9.5.4.tgz

postgresql-docs-9.5.4.tgz

postgresql-contrib-9.5.4.tgz

postgresql-server-9.5.4.tgz

postgresql-plpython-9.5.4.tgz