diff --git a/ansible-2.9.13.tar.gz b/ansible-2.9.13.tar.gz
deleted file mode 100644
index f686c76..0000000
--- a/ansible-2.9.13.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:3ab21588992fbfe9de3173aefd63da1267dc12892a60f5cfdc055fe19c549644
-size 14261322
diff --git a/ansible-2.9.13.tar.gz.sha b/ansible-2.9.13.tar.gz.sha
deleted file mode 100644
index 173b88e..0000000
--- a/ansible-2.9.13.tar.gz.sha
+++ /dev/null
@@ -1 +0,0 @@
-3ab21588992fbfe9de3173aefd63da1267dc12892a60f5cfdc055fe19c549644  ansible-2.9.13.tar.gz
diff --git a/ansible-2.9.14.tar.gz b/ansible-2.9.14.tar.gz
new file mode 100644
index 0000000..9769394
--- /dev/null
+++ b/ansible-2.9.14.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:efe7183e08f0c9dd9efd9124efa8978be62851b1e8eb856593a073538bfc6fb5
+size 14272261
diff --git a/ansible-2.9.14.tar.gz.sha b/ansible-2.9.14.tar.gz.sha
new file mode 100644
index 0000000..7e3d683
--- /dev/null
+++ b/ansible-2.9.14.tar.gz.sha
@@ -0,0 +1 @@
+efe7183e08f0c9dd9efd9124efa8978be62851b1e8eb856593a073538bfc6fb5  ansible-2.9.14.tar.gz
diff --git a/ansible.changes b/ansible.changes
index d828f3f..193c670 100644
--- a/ansible.changes
+++ b/ansible.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Tue Oct  6 04:36:05 UTC 2020 - Michael Ströder <michael@stroeder.com>
+
+- update to version 2.9.14 with many small improvements and bug fixes,
+  most notably:
+  * kubectl - connection plugin now redact kubectl_token and 
+    kubectl_password in console log (CVE-2020-1753).
+- avoid trailing comments after %endif
+
 -------------------------------------------------------------------
 Tue Sep  1 08:44:17 UTC 2020 - Michael Ströder <michael@stroeder.com>
 
diff --git a/ansible.spec b/ansible.spec
index 1e3bba4..1677f87 100644
--- a/ansible.spec
+++ b/ansible.spec
@@ -117,8 +117,10 @@ Requires:       python-paramiko
 Requires:       python-six
 Requires:       python2-cryptography
 Requires:       sshpass
-%endif  # Requires for RHEL 7
-%endif  # Requires for RHEL 8
+# end of Requires for RHEL 7
+%endif
+# end of Requires for RHEL 8
+%endif
 # Bundled provides
 Provides:       bundled(python-backports-ssl_match_hostname) = 3.7.0.1
 Provides:       bundled(python-distro) = 1.4.0
@@ -220,7 +222,7 @@ Recommends:     %{python}-six
 Recommends:     sshpass
 %endif
 Name:           ansible
-Version:        2.9.13
+Version:        2.9.14
 Release:        0
 Summary:        SSH-based configuration management, deployment, and task execution system
 License:        GPL-3.0-or-later