diff --git a/.gitignore b/.gitignore
index 3aaae8a..a917966 100644
--- a/.gitignore
+++ b/.gitignore
@@ -160,3 +160,5 @@ bind-9.7.2b1.tar.gz
 /bind-9.16.21.tar.xz.asc
 /bind-9.16.22.tar.xz
 /bind-9.16.22.tar.xz.asc
+/bind-9.16.23.tar.xz
+/bind-9.16.23.tar.xz.asc
diff --git a/bind.spec b/bind.spec
index 511373b..371d5df 100644
--- a/bind.spec
+++ b/bind.spec
@@ -52,8 +52,8 @@
 Summary:  The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
 Name:     bind
 License:  MPLv2.0
-Version:  9.16.22
-Release:  2%{?dist}
+Version:  9.16.23
+Release:  1%{?dist}
 Epoch:    32
 Url:      https://www.isc.org/downloads/bind/
 #
@@ -1122,6 +1122,9 @@ fi;
 %endif
 
 %changelog
+* Fri Nov 19 2021 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-1
+- Update to 9.16.23 (#2024210)
+
 * Sat Nov 06 2021 Adrian Reber <adrian@lisas.de> - 32:9.16.22-2
 - Rebuilt for protobuf 3.19.0
 
diff --git a/sources b/sources
index cd323b3..38a7720 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (bind-9.16.22.tar.xz) = 586fb4d5a656d6539033dcdfdd230b36465a2d2e6ada651c1f1548d062a9050e7a962af87e2a56931fe24c65586d29012d4a041dcddbb28f42b4d01fe291d9d1
-SHA512 (bind-9.16.22.tar.xz.asc) = eaffe44c19dd9a0c4ee4c707a599a2cae5c7038f524140f682f3edaf0d4737c44d6dd4be86fd43b9e66b23a21948e31b94f60543f849050ecd706b4be0c5b374
+SHA512 (bind-9.16.23.tar.xz) = 9dd1c5241f15bf6c3c1e1564564c7e91cba0dfc7f1262d53b4b54f4f7230ed651a148e95efa25efab1712b65bdeb555dfc0e1b524dcfc2a05ede43dd5b3978cf
+SHA512 (bind-9.16.23.tar.xz.asc) = b17fb7f8e24fd22f12113a5462e654c13660c1f66eeff19bb3e0e2eb63f048c2cac9e4a627e5e2d16b75d69234f5b9618f4d52ba4d9dd7d77fd2baf77322024a