CVE-2026-6471: logical decoding: require the output plugin to be a
recognised, installed plugin rather than an arbitrary path, so a
non-superuser holding REPLICATION can no longer make the server dlopen any
file it can read (CVSS 7.2)
CVE-2026-16239: portal/cursor lifecycle: re-creating a cursor with different
result types no longer leaves the old tuple descriptor in place, closing the
type confusion that followed (CVSS 8.8)
CVE-2026-18408: pg_dump: quote the \restrict meta-command argument so a
malicious superuser on the origin server cannot inject psql input that runs
at restore time (CVSS 8.8); completes the CVE-2025-8714 fix