diff --git a/gap-orb.changes b/gap-orb.changes
index d7f6615..75ce69e 100644
--- a/gap-orb.changes
+++ b/gap-orb.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Sun Feb 12 11:00:43 UTC 2023 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 4.9.0
+  * Validate the output of hash functions in the C implementation,
+    and report bad values as errors, instead of crashing or corrupting
+    data.
+
 -------------------------------------------------------------------
 Thu Nov 15 00:11:03 UTC 2018 - Jan Engelhardt <jengelh@inai.de>
 
diff --git a/gap-orb.spec b/gap-orb.spec
index a0452ab..5e533c6 100644
--- a/gap-orb.spec
+++ b/gap-orb.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package gap-orb
 #
-# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2023 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,16 +17,15 @@
 
 
 Name:           gap-orb
-Version:        4.8.1
+Version:        4.9.0
 Release:        0
 Summary:        GAP: Methods to enumerate Orbits
 License:        GPL-3.0-or-later
 Group:          Productivity/Scientific/Math
-Url:            http://gap-packages.github.io/orb/
+URL:            https://gap-packages.github.io/orb
 
-#Git-Clone:	git://github.com/gap-system/orb
-Source:         https://www.gap-system.org/pub/gap/gap4/tar.bz2/packages/orb-%version.tar.bz2
-BuildRoot:      %{_tmppath}/%{name}-%{version}-build
+#Git-Clone:	https://github.com/gap-packages/orb
+Source:         https://github.com/gap-packages/orb/releases/download/v%version/orb-%version.tar.gz
 BuildRequires:  autoconf
 BuildRequires:  automake
 BuildRequires:  gap-devel >= 4.9
@@ -43,17 +42,15 @@ The orb package is about enumerating orbits in various ways.
 %setup -qn orb-%version
 
 %build
-autoreconf -fi
-%configure --with-gaproot="%gapdir"
-# runs install :/
-make %{?_smp_mflags} DESTDIR="%buildroot"
-rm -Rf {aclocal*,autom4*,cnf,config*,m4,src}
-find . -type f -name "*.la" -delete
+./configure --with-gaproot="%gapdir"
+%make_build
 
 %install
 %gappkg_simple_install
+pushd "%buildroot/$moddir"
+rm -Rf src
+popd
 
 %files -f %name.files
-%defattr(-,root,root)
 
 %changelog
diff --git a/orb-4.8.1.tar.bz2 b/orb-4.8.1.tar.bz2
deleted file mode 100644
index 15e5929..0000000
--- a/orb-4.8.1.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:eb1b022eb91b8a1b317d54010e225c4717a3ed266798a9f4b9d59dfc27bea78b
-size 1117063
diff --git a/orb-4.9.0.tar.gz b/orb-4.9.0.tar.gz
new file mode 100644
index 0000000..4ce339d
--- /dev/null
+++ b/orb-4.9.0.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:a1f81707743cbbf5eddecf0b195293b308987f17c7795690c65b5e4a92dfbc1f
+size 988847