diff --git a/doc/src/sgml/release-16.sgml b/doc/src/sgml/release-16.sgml
index 2c228c516fd..7e8fbaf659b 100644
--- a/doc/src/sgml/release-16.sgml
+++ b/doc/src/sgml/release-16.sgml
@@ -354,35 +354,6 @@ Branch: REL_14_STABLE [42d333a78] 2026-08-10 06:38:36 -0700
-
- Fix multirange type handling
- in pg_restore_attribute_stats()
- (OpenAI Security Research Team)
-
-
-
- pg_restore_attribute_stats() treated multirange
- types just like their underlying range type. This works correctly
- for the bounds histogram, but it was wrong for all the other
- statistics kinds.
-
-
-
- The PostgreSQL Project thanks
- Amy Burnett (OpenAI Codex Security)
- for reporting this problem.
- (CVE-2026-16238)
-
-
-
-
-
-
- Reject GSSEncRequest after direct SSL connection (Michael Paquier)
-
-
-
- After establishing a TLS-encrypted connection, the server would
- still accept a request for GSSAPI encryption. If that succeeded,
- the connection would proceed using TLS encryption, but it would look
- like a GSS connection to the pg_hba rules.
- Thus, a pg_hba policy intending to disallow TLS
- would not be enforced correctly.
-
-
-
- The PostgreSQL Project thanks
- p4p3r
- for reporting this problem.
- (CVE-2026-14681)
-
-
-
-
-
-
- Fix buffer overrun
- in contrib/pg_stat_statements (Álvaro Herrera)
-
-
-
- Query normalization didn't accurately account for the amount of
- space the normalized string would require.
-
-
-
- The PostgreSQL Project thanks
- Sajeeb Lohani (with TrendAI Zero Day Initiative) and Yuelin Wang
- for reporting this problem.
- (CVE-2026-14676)
-
-
-
-
-