diff --git a/postgresql.spec b/postgresql.spec
index 565e939f946219c00acc231a549d2d9946617a20..3efff417603bf0b2db92616d509678496ec9dc6b 100644
--- a/postgresql.spec
+++ b/postgresql.spec
@@ -44,8 +44,8 @@
 
 Summary:       PostgreSQL client programs
 Name:          postgresql
-Version:       15.8
-Release:       3%{?dist}
+Version:       15.9
+Release:       1%{?dist}
 License:       PostgreSQL
 Url:           http://www.postgresql.org/
 Source0:       https://ftp.postgresql.org/pub/source/v%{version}/postgresql-%{version}.tar.bz2
@@ -1094,6 +1094,10 @@ make -C postgresql-setup-%{setup_version} check
 
 
 %changelog
+* Fri Nov 15 2024 Upgrade Robot <upbot@opencloudos.tech> - 15.9-1
+- Upgrade to version 15.9
+- CVEs fixed: CVE-2024-10976, CVE-2024-10977, CVE-2024-10978, CVE-2024-10979
+
 * Thu Sep 26 2024 OpenCloudOS Release Engineering <releng@opencloudos.tech> - 15.8-3
 - Rebuilt for clarifying the packages requirement in BaseOS and AppStream
 
diff --git a/sources b/sources
index aedcb54cb2308274d1a2c36c336e362873a32582..a307cb4ee2827b292622c78976d78227a0658f92 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (postgresql-15.8.tar.bz2) = da610d878819179fcafe8adf6cbe72e188537dbaff82457c67013f9089ae8cbb1f6d8c4d5ea62e4ef54c3e2a90060bd1f36b71b8531354279181e574d903940c
+SHA512 (postgresql-15.9.tar.bz2) = eb8e85e136e5e3f2e9da1fffce06ffda3fdd2001d46153e1a7e02983bd1fcb29a92bec3cbf1fec48a4505b68a9360d24acf45e96a3ce94272833ba45096e8a1b
 SHA512 (postgresql-14.10.tar.bz2) = f546e62eb158efdeecf091271ee60945604ca7f3683f0b259ee18eb682431158e282bf4f81d8df304c956919788f8077e72aa47c467d32d6aef1ccfe470862a5
 SHA512 (postgresql-setup-8.9.tar.gz) = 118e9ebf858722a38b0e90324bc1b49fc7058cda601ca0a7e78c94e7b95e89d6dbbc46f377626364b068614ced3cde3cb4733973ad2d71bf17892ad773657ef7