diff --git a/bind-9.16.24.tar.xz b/bind-9.16.24.tar.xz
deleted file mode 100644
index 0ba0b15..0000000
--- a/bind-9.16.24.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:5582f3734bd6232284f93f14206b8a46d1f819dea4797ae157066f6963b08507
-size 5070180
diff --git a/bind-9.16.24.tar.xz.sha512.asc b/bind-9.16.24.tar.xz.sha512.asc
deleted file mode 100644
index c4a5320..0000000
--- a/bind-9.16.24.tar.xz.sha512.asc
+++ /dev/null
@@ -1,17 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Comment: GPGTools - https://gpgtools.org
-
-iQIzBAABCgAdFiEEqtu6UHTxQC97adVrxbTukxqfnf0FAmGw9sYACgkQxbTukxqf
-nf3dqg/9FnqxV801CY8DBd8Lvw55xw+lVVLiUia/1ZNBgAYwyVBnpv+kPpQBV103
-BW0FgtIepm5zyZgiYG/eN2N67Bp6KC6fWRj+NEjkw2VZFC5Nr4cETGqnf5WgmQA3
-gbTj1E/ar/DoHW9hA+mtm5iqKHEFm4wn+vp3aLR+W/I9Zf5t3LYovW6UiwSjBQpZ
-F/CDxeIlsV65uu1reiEhjk417+qzAFPgx1YDqgfvVy0t4M4N4R+q8zZakqS5Knpu
-0Uesj6hnyq0EoWFyiufeK5D5+ew+QdIiaIgecbniF2FEKGyejm1PBtAjr4tlagkO
-w6QJQmQ4PYnMyuFbabhMeGKAtQ1fkD4KmHpnDhiTTTeSXiWhU59izTv/Rz/6+Hij
-ttHWF7dePV6V3H+JYqj1bdjiiXhtQLtYmuKloqA9egTxzujKCHkOu0mrZ3Ucn3de
-YvW7fln4lW0XeDFjtNDRJyUf2kaeN50zkft94s0AmzO1ii9Wngz40gGIoTNst+hb
-fJe3xrb9/PmehL4mQddska43E3ovyGQYj9vKxDe43xIeE/4hMYEkCSxIk6ltygH0
-vcibiOM7Z8SSjLWGRILAW4dCpWkFHjWPcjGMEKFxtZBjDusIZ3zPddunsOpb6P8a
-56rW9+oJC2l9bjoy4FRTdRUhbYFbDyrsDuUFQ7cWzDZQ1Hbh3sE=
-=ogXa
------END PGP SIGNATURE-----
diff --git a/bind-9.16.25.tar.xz b/bind-9.16.25.tar.xz
new file mode 100644
index 0000000..5bb75f5
--- /dev/null
+++ b/bind-9.16.25.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:9fa328850f82843ef8b7bf1ff5322cb68b110273a33f375ba41f35270f5e1ff3
+size 5086780
diff --git a/bind-9.16.25.tar.xz.sha512.asc b/bind-9.16.25.tar.xz.sha512.asc
new file mode 100644
index 0000000..87aec3b
--- /dev/null
+++ b/bind-9.16.25.tar.xz.sha512.asc
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Comment: GPGTools - https://gpgtools.org
+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+=phwZ
+-----END PGP SIGNATURE-----
diff --git a/bind.changes b/bind.changes
index 536dd05..18e6ced 100644
--- a/bind.changes
+++ b/bind.changes
@@ -1,3 +1,36 @@
+-------------------------------------------------------------------
+Thu Jan 20 09:48:39 UTC 2022 - Josef Möllers <josef.moellers@suse.com>
+
+- Upgrade to release 9.16.25
+  This upgrade fixes the following bugs:
+  * Enforce enqueuing TCP resumeread to prevent the next read
+    callback from being executed before the current read callback
+    has finished, and the worker receive buffer has been marked as
+    "freed".
+  * Allow replacing expired zone signatures with signatures created
+    by the KSK.
+  * An assertion could occur if a catalog zone event was scheduled
+    while the task manager was being shut down.
+  * Defer detaching from zone->raw in zone_shutdown() if the zone
+    is in the process of being dumped to disk, to ensure that the
+    unsigned serial number information is always written in the
+    raw-format header of the signed version on an inline-signed
+    zone.
+  * named could leak memory when two dnssec-policy clauses had the
+    same name. named failed to log this error.
+  * Add a missing isc_condition_destroy() for nmsocket condition
+    variable and add missing isc_mutex_destroy() for nmworker lock.
+  [bind-9.16.25.tar.xz, bind-9.16.25.tar.xz.sha512.asc]
+
+-------------------------------------------------------------------
+Wed Jan 19 08:38:11 UTC 2022 - Josef Möllers <josef.moellers@suse.com>
+
+- Added /var/log to the ReadWritePaths as some log files are
+  written there:
+  * dump-file "/var/log/named_dump.db"
+  * statistics-file "/var/log/named.stats"
+  [bsc#1194721, vendor-files.tar.bz2]
+
 -------------------------------------------------------------------
 Wed Dec 15 14:37:47 UTC 2021 - Josef Möllers <josef.moellers@suse.com>
 
diff --git a/bind.spec b/bind.spec
index 857a89f..7896d1d 100644
--- a/bind.spec
+++ b/bind.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package bind
 #
-# Copyright (c) 2021 SUSE LLC
+# Copyright (c) 2022 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -46,7 +46,7 @@
   %define _fillupdir %{_localstatedir}/adm/fillup-templates
 %endif
 Name:           bind
-Version:        9.16.24
+Version:        9.16.25
 Release:        0
 Summary:        Domain Name System (DNS) Server (named)
 License:        MPL-2.0
diff --git a/vendor-files.tar.bz2 b/vendor-files.tar.bz2
index deae428..28cd09e 100644
--- a/vendor-files.tar.bz2
+++ b/vendor-files.tar.bz2
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:b8093a3d955e1ad9cfab735c6385cf9fd79f1175e022dc40560d849527ac92e2
-size 19574
+oid sha256:0fa62530ab1e30459f5846db88927c4eca95f557c686bc9cb1cb9efab455f1c2
+size 19509