diff --git a/bind-9.16.19.tar.xz b/bind-9.16.19.tar.xz
deleted file mode 100644
index 32942ef..0000000
--- a/bind-9.16.19.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:20bf727559302c933475904847041916bb6c279680c170babc01a76998e80ad3
-size 5039240
diff --git a/bind-9.16.19.tar.xz.sha512.asc b/bind-9.16.19.tar.xz.sha512.asc
deleted file mode 100644
index 899f532..0000000
--- a/bind-9.16.19.tar.xz.sha512.asc
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEE6atueSM8BBbomT9FDAOvqQpZZ8QFAmDuC5IACgkQDAOvqQpZ
-Z8SEchAAn/4HOK04/Tt4PSv0hWGMBMXvbx/WKhVgQhGooGiHekPTM49kxjQCvFT8
-sSH9uq5FEGbL+98fM1r9qNkjl+tivZ9w7EhE/wahUNxacGzv87XE8QndVxCoUFE4
-NeU4D81yh665HxhZUCWXEgAUUWrZ6c6jBymKo/xkZw/ou53Xukk12IJb/PG2vv8O
-3vVDSBuZagcBu/hCzK8us0uCRsTQSHx6e0QKYABjXLr9bkSignI42sH8OjBzSmBi
-4ui21sa2UgR2Iw9t/v6QPHBnWxASUjBfiUOpYIXDMW1F/bAGShN1i3WMKn+vYsI+
-Q6fJpBjFmG5cwbWwgtuS+Gmm2E8gQCFA87h3u7t5WbZP/j2iiul06JARhVbEY3Kq
-06PqvAqkiFAiD1zidhsTax/vzOXcjjrWL07sx4Z8S57TAMZ2JpTw28ObFXyT4k6w
-zSzoRC8OY9lbesCvsMQMcuZDCayB6ssA38FzBKUFQmwwg96eFIAtkLKVklYibME8
-EKWd7GHur6ulpRd2IW608zeKRiunVJycI3LVMdJyJx2XmROMrivYxAnbcYOx+iT/
-gocuPgnsz45IWoqG2P/Q1RER12I01q7tmZflyYNiQdG3rIcwnfLXIoEYYDXotFzU
-bnRdcuQcjVWVe24lZnNNnW5r+5korVDzQ3wVGhcY8fM30YhqqFk=
-=7G5u
------END PGP SIGNATURE-----
diff --git a/bind-9.16.20.tar.xz b/bind-9.16.20.tar.xz
new file mode 100644
index 0000000..733b31f
--- /dev/null
+++ b/bind-9.16.20.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4d0d93c0d0b63080609e84625f24ff8777f8d164e78a75b1c19c334ce42d5b58
+size 5042196
diff --git a/bind-9.16.20.tar.xz.sha512.asc b/bind-9.16.20.tar.xz.sha512.asc
new file mode 100644
index 0000000..af922f3
--- /dev/null
+++ b/bind-9.16.20.tar.xz.sha512.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=EURP
+-----END PGP SIGNATURE-----
diff --git a/bind.changes b/bind.changes
index 31a4a73..c26eb7c 100644
--- a/bind.changes
+++ b/bind.changes
@@ -1,3 +1,29 @@
+-------------------------------------------------------------------
+Thu Aug 19 06:25:35 UTC 2021 - Josef Möllers <josef.moellers@suse.com>
+
+- Upgrade to 9.16.19
+  Bugs fixed:
+  * An assertion failure occurred when named attempted to send a
+    UDP packet that exceeded the MTU size, if Response Rate
+    Limiting (RRL) was enabled.  (CVE-2021-25218)
+  * Zones using KASP and inline-signed zones failed to apply
+    changes from the unsigned zone to the signed zone under
+    certain circumstances.
+  * "rndc reload <zonename>" could trigger a redundant reload for
+    an inline-signed zone whose zone file was not modified since
+    the last "rndc reload".
+  * named failed to check the opcode of responses when performing
+    zone refreshes, stub zone updates, and UPDATE forwarding.
+  * Some changes to "zone-statistics" settings were not properly
+    processed by "rndc reconfig".
+  * The "check DS" code failed to release all resources upon
+    named shutdown when a refresh was in progress.
+  * Authentication of rndc messages could fail if a "controls"
+    statement was configured with multiple key algorithms for
+    the same listener.
+  More changes see CHANGES in the source package.
+  [bsc#1189460, CVE-2021-25218]
+
 -------------------------------------------------------------------
 Thu Jul 29 13:14:28 UTC 2021 - Paolo Stivanin <info@paolostivanin.com>
 
diff --git a/bind.spec b/bind.spec
index 85a4d85..b814468 100644
--- a/bind.spec
+++ b/bind.spec
@@ -45,7 +45,7 @@
   %define _fillupdir %{_localstatedir}/adm/fillup-templates
 %endif
 Name:           bind
-Version:        9.16.19
+Version:        9.16.20
 Release:        0
 Summary:        Domain Name System (DNS) Server (named)
 License:        MPL-2.0