diff --git a/libXv-1.0.8.tar.bz2 b/libXv-1.0.8.tar.bz2
deleted file mode 100644
index 3535436..0000000
--- a/libXv-1.0.8.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:4f00eb5347390909cea4e53a69425839d2a6a44e0e0613321d59e7e4aeaf73d7
-size 308065
diff --git a/libXv-1.0.9.tar.bz2 b/libXv-1.0.9.tar.bz2
new file mode 100644
index 0000000..8a4b731
--- /dev/null
+++ b/libXv-1.0.9.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:a874dbf864d0271bbe795af67ef5b3f20096c92fc11eacbf0d2af00e32bc5b4b
+size 309744
diff --git a/libXv.changes b/libXv.changes
index eb12742..0387744 100644
--- a/libXv.changes
+++ b/libXv.changes
@@ -1,3 +1,13 @@
+-------------------------------------------------------------------
+Sun Jun 23 14:47:39 UTC 2013 - tobias.johannes.klausmann@mni.thm.de
+
+- Update to version 1.0.9:
+  This quick fix release corrects an issue with the security fix from 1.0.8,
+  in which, if the size checks did determine the response from the X server
+  was too large to fit in the buffer it had allocated, XvQueryPortAttributes
+  could return a pointer to the caller that pointed to uninitialized memory
+  where the caller expected a nil-terminated string.
+
 -------------------------------------------------------------------
 Sat Jun  1 20:25:05 UTC 2013 - tobias.johannes.klausmann@mni.thm.de
 
diff --git a/libXv.spec b/libXv.spec
index a4439bf..ff2b270 100644
--- a/libXv.spec
+++ b/libXv.spec
@@ -18,7 +18,7 @@
 
 Name:           libXv
 %define lname	libXv1
-Version:        1.0.8
+Version:        1.0.9
 Release:        0
 Summary:        X Video extension library
 License:        MIT