diff --git a/postgresql16.spec b/postgresql16.spec
index 8a57bc506b4e4b73027c0d7bf8b0858d11c0ae47..04bc3f46191990ca1ff669323bace160150ae486 100644
--- a/postgresql16.spec
+++ b/postgresql16.spec
@@ -52,7 +52,7 @@
 
 Summary:       PostgreSQL client programs
 Name:          %{majorname}%{majorversion}
-Version: 	   %{majorversion}.4
+Version: 	   16.5
 Release:       1%{?dist}
 License:       PostgreSQL
 Url:           http://www.postgresql.org/
@@ -1175,6 +1175,10 @@ make -C postgresql-setup-%{setup_version} check
 
 
 %changelog
+* Fri Nov 15 2024 Wang Guodong <gordonwwang@tencent.com> - 16.5-1
+- Upgrade to version 16.5
+- CVEs fixed: CVE-2024-10976, CVE-2024-10977, CVE-2024-10978, CVE-2024-10979
+
 * Fri Aug 30 2024 Wang Guodong <gordonwwang@tencent.com> - 16.4-1
 - Upgrade to version 16.4
 - CVEs fixed: CVE-2024-7348, CVE-2024-4317
diff --git a/sources b/sources
index 982c55d1659b3ed33f708be896d261de41e6b3a5..8d87ba49662f34f9e5ed561c9b69830e68d8eb62 100755
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
 SHA512 (postgresql-15.5.tar.bz2) = 9ed9d160b3cef99954ccd47a970c107b7e3b0196a7d848f740bf3c52a1c626f6f457814c97f37b9f0467bb07734e19806a15bd9cf3c39445e1d89e75b37064cc
-SHA512 (postgresql-16.4.tar.bz2) = f2070299f0857a270317ac984f8393374cf00d4f32a082fe3c5481e36c560595ea711fed95e40d1bc90c5089edf8f165649d443d8b9c68614e1c83fc91268e96
+SHA512 (postgresql-16.5.tar.bz2) = aec47744284c5a593f4223de26187dd4b00e27a8a8948c6b7d24ca522eb6b4d0098ec956e80f37d5a3a841d18e45e4a21e7323e33af91eff24e1b2c59577bef1
 SHA512 (postgresql-setup-8.9.tar.gz) = 118e9ebf858722a38b0e90324bc1b49fc7058cda601ca0a7e78c94e7b95e89d6dbbc46f377626364b068614ced3cde3cb4733973ad2d71bf17892ad773657ef7