diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 4f6bae4..fac1d49 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -40,10 +40,10 @@ jobs:
     strategy:
       matrix:
         release:
-          - version: 10.16.3
-            tarball: https://download.owncloud.com/server/stable/owncloud-complete-20260522.tar.bz2
+          - version: 10.16.4
+            tarball: https://github.com/owncloud/core/releases/download/v10.16.4/owncloud-complete-20260729.tar.bz2
             base: v22.04
-            trivy-ignore: v22.04/10.16.3/.trivyignore
+            trivy-ignore: v22.04/10.16.4/.trivyignore
             extra-tags: |
               10.16
               10
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 26c6ca4..58f4a88 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,7 @@
 ## 2026-07-29
 
 * Changed
+  * Update 10.16.3 to 10.16.4 built from the GitHub release tarball
   * Update 11.0.0-rc2 to 11.0.0-rc3 built from the GitHub release tarball
 
 ## 2026-07-23
diff --git a/README.md b/README.md
index 816bf43..c2577b0 100644
--- a/README.md
+++ b/README.md
@@ -33,7 +33,7 @@ ownCloud is an open-source file sync, share and content collaboration software t
 
 ## Docker Tags and respective Dockerfile links
 
-- [`10.16.3`, `10.16`, `10`, `latest`](https://github.com/owncloud-docker/server/blob/master/v22.04/Dockerfile.multiarch) available as `owncloud/server:10.16.3`
+- [`10.16.4`, `10.16`, `10`, `latest`](https://github.com/owncloud-docker/server/blob/master/v22.04/Dockerfile.multiarch) available as `owncloud/server:10.16.4`
 - [`11.0.0-rc3`](https://github.com/owncloud-docker/server/blob/master/v24.04/Dockerfile.multiarch) available as `owncloud/server:11.0.0-rc3`
 
 ## Default volumes
diff --git a/agents.md b/agents.md
index ee4bbe3..a2339de 100644
--- a/agents.md
+++ b/agents.md
@@ -39,7 +39,7 @@ There is no local application build (no Node/pnpm/Make toolchain). The image is
 built by `.github/workflows/main.yml`, which calls reusable workflows from
 [`owncloud-docker/ubuntu`](https://github.com/owncloud-docker/ubuntu):
 
-- Matrix builds two releases: `10.16.3` (base `v22.04`) and `11.0.0-rc3`
+- Matrix builds two releases: `10.16.4` (base `v22.04`) and `11.0.0-rc3`
   (base `v24.04`), each via `<base>/Dockerfile.multiarch`.
 - The ownCloud version is injected with the `TARBALL_URL` build arg — there is no
   version pinned inside the Dockerfile.
diff --git a/v22.04/10.16.3/.trivyignore b/v22.04/10.16.4/.trivyignore
similarity index 100%
rename from v22.04/10.16.3/.trivyignore
rename to v22.04/10.16.4/.trivyignore