diff --git a/postgresql16.spec b/postgresql16.spec
index 6e8a71e4b00ba19b7b119eb3666290fea4a08eda..8a57bc506b4e4b73027c0d7bf8b0858d11c0ae47 100644
--- a/postgresql16.spec
+++ b/postgresql16.spec
@@ -52,8 +52,8 @@
 
 Summary:       PostgreSQL client programs
 Name:          %{majorname}%{majorversion}
-Version: 	   %{majorversion}.1
-Release:       3%{?dist}
+Version: 	   %{majorversion}.4
+Release:       1%{?dist}
 License:       PostgreSQL
 Url:           http://www.postgresql.org/
 Source0:       https://ftp.postgresql.org/pub/source/v%{version}/postgresql-%{version}.tar.bz2
@@ -1035,6 +1035,7 @@ make -C postgresql-setup-%{setup_version} check
 %{_datadir}/pgsql/system_constraints.sql
 %{_datadir}/pgsql/system_functions.sql
 %{_datadir}/pgsql/system_views.sql
+%{_datadir}/pgsql/fix-CVE-2024-4317.sql
 %{_datadir}/pgsql/timezonesets/
 %{_datadir}/pgsql/tsearch_data/
 %dir %{_datadir}/postgresql-setup
@@ -1174,6 +1175,10 @@ make -C postgresql-setup-%{setup_version} check
 
 
 %changelog
+* Fri Aug 30 2024 Wang Guodong <gordonwwang@tencent.com> - 16.4-1
+- Upgrade to version 16.4
+- CVEs fixed: CVE-2024-7348, CVE-2024-4317
+
 * Fri Aug 16 2024 OpenCloudOS Release Engineering <releng@opencloudos.tech> - 16.1-3
 - Rebuilt for loongarch release
 
diff --git a/sources b/sources
index 3e5ab480b95210a4ecd1c525546fb7b40e344182..982c55d1659b3ed33f708be896d261de41e6b3a5 100755
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
 SHA512 (postgresql-15.5.tar.bz2) = 9ed9d160b3cef99954ccd47a970c107b7e3b0196a7d848f740bf3c52a1c626f6f457814c97f37b9f0467bb07734e19806a15bd9cf3c39445e1d89e75b37064cc
-SHA512 (postgresql-16.1.tar.bz2) = 69f4635e5841452599f13b47df41ce2425ab34b4e4582fd2c635bc78d561fa36c5b03eccb4ae6569872dc74775be1b5a62dee20c9a4f12a43339250128352918
+SHA512 (postgresql-16.4.tar.bz2) = f2070299f0857a270317ac984f8393374cf00d4f32a082fe3c5481e36c560595ea711fed95e40d1bc90c5089edf8f165649d443d8b9c68614e1c83fc91268e96
 SHA512 (postgresql-setup-8.9.tar.gz) = 118e9ebf858722a38b0e90324bc1b49fc7058cda601ca0a7e78c94e7b95e89d6dbbc46f377626364b068614ced3cde3cb4733973ad2d71bf17892ad773657ef7