diff --git a/postgresql16.spec b/postgresql16.spec
index 8308bfbf661ed0068adb3fe033dcfdb5b9755020..a0fe39a1705615af053106760e8c42576d0d2483 100644
--- a/postgresql16.spec
+++ b/postgresql16.spec
@@ -52,8 +52,8 @@
 
 Summary:       PostgreSQL client programs
 Name:          %{majorname}%{majorversion}
-Version: 	   16.9
-Release:       2%{?dist}
+Version: 	   16.10
+Release:       1%{?dist}
 License:       PostgreSQL
 Url:           http://www.postgresql.org/
 Source0:       https://ftp.postgresql.org/pub/source/v%{version}/postgresql-%{version}.tar.bz2
@@ -1175,6 +1175,9 @@ make -C postgresql-setup-%{setup_version} check
 
 
 %changelog
+* Mon Aug 18 2025 Wang Guodong <gordonwwang@tencent.com> - 16.10-1
+- Upgrade to version 16.10, fix CVE-2025-8713, CVE-2025-8714, CVE-2025-8715
+
 * Wed Jun 11 2025 bbrucezhang <bbrucezhang@tencent.com> - 16.9-2
 - Rebuilt for loongarch64
 
diff --git a/sources b/sources
index 4dbdfdfa5111bf831fd75f63290c670e4d7889b2..bf1cf0ef1ad85266610fb30736bd6fbfa9bb0793 100755
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
 SHA512 (postgresql-15.5.tar.bz2) = 9ed9d160b3cef99954ccd47a970c107b7e3b0196a7d848f740bf3c52a1c626f6f457814c97f37b9f0467bb07734e19806a15bd9cf3c39445e1d89e75b37064cc
-SHA512 (postgresql-16.9.tar.bz2) = 23a3d983c5be49c3daabbbde35db2920bd2e2ba8d9baba805e7908da1f43153ff438c76c253ea8ee8ac6f8a9313fbf0348a1e9b45ef530c5e156fee0daceb814
+SHA512 (postgresql-16.10.tar.bz2) = b6de80d522f863b0d9dd8c2bf4f71bea309bd07586859e309a9821e7f6fd5839557dc396351e7b61aebf492bf8c8a053a324f059a1dee621ac1a6d5e8eccea22
 SHA512 (postgresql-setup-8.9.tar.gz) = 118e9ebf858722a38b0e90324bc1b49fc7058cda601ca0a7e78c94e7b95e89d6dbbc46f377626364b068614ced3cde3cb4733973ad2d71bf17892ad773657ef7