diff --git a/dns/bind916/Makefile b/dns/bind916/Makefile
index cef171a7f0ca..594072bf38b2 100644
--- a/dns/bind916/Makefile
+++ b/dns/bind916/Makefile
@@ -25,7 +25,7 @@ RUN_DEPENDS=	bind-tools>0:dns/bind-tools
 
 USES=		compiler:c11 cpe libedit pkgconfig ssl tar:xz
 # ISC releases things like 9.8.0-P1, which our versioning doesn't like
-ISCVERSION=	9.16.40
+ISCVERSION=	9.16.42
 
 CPE_VENDOR=	isc
 CPE_VERSION=	${ISCVERSION:C/-.*//}
diff --git a/dns/bind916/distinfo b/dns/bind916/distinfo
index 172a0c20f55b..131d231250ef 100644
--- a/dns/bind916/distinfo
+++ b/dns/bind916/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1681908667
-SHA256 (bind-9.16.40.tar.xz) = cf8ee5093a844a92dce0ebc405fd02c0a918731e3088b0dd7528ea99a4e40ebd
-SIZE (bind-9.16.40.tar.xz) = 5120328
+TIMESTAMP = 1687331434
+SHA256 (bind-9.16.42.tar.xz) = a8b51c6bfdf3ab6885102f764c2418e037897b7ea46a09f8f07876fa11a6c0b3
+SIZE (bind-9.16.42.tar.xz) = 5123476