diff --git a/libnettle.changes b/libnettle.changes
index 2ad43d1..b0b1094 100644
--- a/libnettle.changes
+++ b/libnettle.changes
@@ -1,3 +1,29 @@
+-------------------------------------------------------------------
+Mon May 15 19:20:37 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- update to 3.9
+  * rewrite of the C and plain x86_64 assembly implementations of
+    GHASH to use precomputed tables in a different way, with tables
+    always accessed in the same sequential manner. This should make
+    Nettle's GHASH implementation side-channel silent on all
+    platforms, but considerably slower on platforms without carry-
+    less mul instructions. E.g., benchmarks of the C implementation
+    on x86_64 showed a slowdown of 3 times.
+  * Fix bug in ecdsa and gostdsa signature verify operation, for
+    the unlikely corner case that point addition really is point
+    duplication.
+  * Fix for chacha on Power7, nettle's assembly used an instruction
+    only available on later processors
+  * Add support for the SM4 block cipher
+  * Add support for the Balloon password hash
+  * Add support for SIV-GCM authenticated encryption mode
+  * Add support for OCB authenticated encryption mode.
+  * New exported functions md5_compress, sha1_compress,
+    sha256_compress, sha512_compress
+  * multiple performance optimizations
+  * Delete all arcfour assembly code. Affects 32-bit x86, 32-bit
+    and 64-bit sparc
+
 -------------------------------------------------------------------
 Wed Mar  8 10:32:20 UTC 2023 - Martin Pluskal <mpluskal@suse.com>
 
diff --git a/libnettle.spec b/libnettle.spec
index b64787f..7a57a7c 100644
--- a/libnettle.spec
+++ b/libnettle.spec
@@ -19,7 +19,7 @@
 %define soname 8
 %define hogweed_soname 6
 Name:           libnettle
-Version:        3.8.1
+Version:        3.9
 Release:        0
 Summary:        Cryptographic Library
 License:        GPL-2.0-or-later AND LGPL-2.1-or-later
diff --git a/nettle-3.8.1.tar.gz b/nettle-3.8.1.tar.gz
deleted file mode 100644
index caf4ea1..0000000
--- a/nettle-3.8.1.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:364f3e2b77cd7dcde83fd7c45219c834e54b0c75e428b6f894a23d12dd41cbfe
-size 2406251
diff --git a/nettle-3.8.1.tar.gz.sig b/nettle-3.8.1.tar.gz.sig
deleted file mode 100644
index 5c5e41a..0000000
Binary files a/nettle-3.8.1.tar.gz.sig and /dev/null differ
diff --git a/nettle-3.9.tar.gz b/nettle-3.9.tar.gz
new file mode 100644
index 0000000..0e3ac1b
--- /dev/null
+++ b/nettle-3.9.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:0ee7adf5a7201610bb7fe0acbb7c9b3be83be44904dd35ebbcd965cd896bfeaa
+size 2393838
diff --git a/nettle-3.9.tar.gz.sig b/nettle-3.9.tar.gz.sig
new file mode 100644
index 0000000..3071b66
Binary files /dev/null and b/nettle-3.9.tar.gz.sig differ