diff --git a/postgresql16.spec b/postgresql16.spec
index 4ccd52731f61a409007fe830e82602265dc787eb..cf5f38539c26ab5271c62c9bc95afb00c3c6424c 100644
--- a/postgresql16.spec
+++ b/postgresql16.spec
@@ -52,8 +52,8 @@
 
 Summary:       PostgreSQL client programs
 Name:          %{majorname}%{majorversion}
-Version: 	   16.5
-Release:       2%{?dist}
+Version: 	   16.8
+Release:       1%{?dist}
 License:       PostgreSQL
 Url:           http://www.postgresql.org/
 Source0:       https://ftp.postgresql.org/pub/source/v%{version}/postgresql-%{version}.tar.bz2
@@ -1175,6 +1175,9 @@ make -C postgresql-setup-%{setup_version} check
 
 
 %changelog
+* Mon Feb 24 2025 Wang Guodong <gordonwwang@tencent.com> - 16.8-1
+- Upgrade to version 16.8, fix CVE-2025-1094
+
 * Thu Jan 09 2025 bbrucezhang <bbrucezhang@tencent.com> - 16.5-2
 - Rebuild for icu-74.2
 
diff --git a/sources b/sources
index 8d87ba49662f34f9e5ed561c9b69830e68d8eb62..09e38fc879586f1322788581e8e415625c3f7524 100755
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
 SHA512 (postgresql-15.5.tar.bz2) = 9ed9d160b3cef99954ccd47a970c107b7e3b0196a7d848f740bf3c52a1c626f6f457814c97f37b9f0467bb07734e19806a15bd9cf3c39445e1d89e75b37064cc
-SHA512 (postgresql-16.5.tar.bz2) = aec47744284c5a593f4223de26187dd4b00e27a8a8948c6b7d24ca522eb6b4d0098ec956e80f37d5a3a841d18e45e4a21e7323e33af91eff24e1b2c59577bef1
+SHA512 (postgresql-16.8.tar.bz2) = f44fdfe01fbf82f3ffe4c9fc860bd27e06dddfe43b6bd6d1c6e267d64086eb5517e23cc1b2b8895cb73e63fce76779993ea9785a97e6e348ed91b4c08bb0492d
 SHA512 (postgresql-setup-8.9.tar.gz) = 118e9ebf858722a38b0e90324bc1b49fc7058cda601ca0a7e78c94e7b95e89d6dbbc46f377626364b068614ced3cde3cb4733973ad2d71bf17892ad773657ef7