diff --git a/CHANGELOG b/CHANGELOG
index b6b3c21..b06c139 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -912,3 +912,9 @@
 * Update Gitea to 1.16.3
 * [Full changelog](https://github.com/go-gitea/gitea/releases/tag/v1.16.3)
 
+[1.23.8]
+* Update Gitea to 1.16.4
+* [Full changelog](https://github.com/go-gitea/gitea/releases/tag/v1.16.4)
+* Restrict email address validation (#17688) (#19085)
+* Fix lfs bug (#19072) (#19080)
+
diff --git a/CloudronManifest.json b/CloudronManifest.json
index 93751bd..ad47a46 100644
--- a/CloudronManifest.json
+++ b/CloudronManifest.json
@@ -4,8 +4,8 @@
   "author": "Gitea developers",
   "description": "file://DESCRIPTION.md",
   "tagline": "A painless self-hosted Git Service",
-  "version": "1.23.7",
-  "upstreamVersion": "1.16.3",
+  "version": "1.23.8",
+  "upstreamVersion": "1.16.4",
   "healthCheckPath": "/explore",
   "httpPort": 3000,
   "memoryLimit": 536870912,
diff --git a/Dockerfile b/Dockerfile
index d201d93..8c99388 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -16,7 +16,7 @@ RUN passwd -d git
 RUN mkdir -p /home/git/gitea
 WORKDIR /home/git
 
-ARG VERSION=1.16.3
+ARG VERSION=1.16.4
 
 RUN curl -L https://dl.gitea.io/gitea/${VERSION}/gitea-${VERSION}-linux-amd64 -o /home/git/gitea/gitea \
     && chmod +x /home/git/gitea/gitea