diff --git a/.gitignore b/.gitignore
index 360d63e..aaf697b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -305,3 +305,5 @@ samba-3.6.0pre1.tar.gz
 /samba-4.16.7.tar.asc
 /samba-4.16.8.tar.xz
 /samba-4.16.8.tar.asc
+/samba-4.16.9.tar.xz
+/samba-4.16.9.tar.asc
diff --git a/samba.spec b/samba.spec
index f7b9e69..17e1ea4 100644
--- a/samba.spec
+++ b/samba.spec
@@ -134,9 +134,9 @@
 
 %define samba_requires_eq()  %(LC_ALL="C" echo '%*' | xargs -r rpm -q --qf 'Requires: %%{name} = %%{epoch}:%%{version}\\n' | sed -e 's/ (none):/ /' -e 's/ 0:/ /' | grep -v "is not")
 
-%global baserelease 2
+%global baserelease 0
 
-%global samba_version 4.16.8
+%global samba_version 4.16.9
 %global talloc_version 2.3.3
 %global tdb_version 1.4.6
 %global tevent_version 0.12.0
@@ -4186,6 +4186,9 @@ fi
 %endif
 
 %changelog
+* Thu Feb 16 2023 Guenther Deschner <gdeschner@redhat.com> - 4.16.9-0
+- Update to version 4.16.9
+
 * Thu Dec 22 2022 Pavel Filipenský <pfilipen@redhat.com> - 4.16.8-2
 - Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional
 - Create package dc-libs also for 'non-dc build'
diff --git a/sources b/sources
index f0f18e7..f13023c 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (samba-4.16.8.tar.xz) = 5efb32db6a54d23c69a0e6ec5696a0f7c8688e44fcc69e1f01fe8aa2c163d74b2fb257711aebd97d4023e8be2211f4ee5e95b168ed4365d7e2cc8eda96b063a7
-SHA512 (samba-4.16.8.tar.asc) = ce4d013616cd536c7964ac8e989beab6d247067da65512f401661cb1cd395c21ff8a19d9cf296fec4991912b1e7137f7856b33f681da56cb2a29be538442f6c8
+SHA512 (samba-4.16.9.tar.xz) = 5ec51b7576b6171bc15653906ed3412ccb7ab383e93791723d5845b7181395473a88be51d19c28bf6b212ca903dea3c24cdd1449222e6f3643bc7cda10049d84
+SHA512 (samba-4.16.9.tar.asc) = 75409da7d935185f567c9342175ba967dd068067a727e2adb9cbfb333c1789a9d9f8d365abbade8f29de4eceadf0f3e9c349e5fab9384adc1750a9459a995174