diff --git a/miller-5.9.0.tar.gz b/miller-5.9.0.tar.gz
deleted file mode 100644
index d99fee2..0000000
--- a/miller-5.9.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:908bf23244e723d513a5f22f9d836e8f4897a8a269104e0455f84befe6016e5a
-size 5011638
diff --git a/miller-5.9.1.tar.gz b/miller-5.9.1.tar.gz
new file mode 100644
index 0000000..227a5d5
--- /dev/null
+++ b/miller-5.9.1.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b452f879b91529845f369ffd161a1022240b830b77fd5a66e0b2e859f1ca38d9
+size 5889554
diff --git a/miller.changes b/miller.changes
index d63b52b..b50144d 100644
--- a/miller.changes
+++ b/miller.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Thu Sep  3 09:50:47 UTC 2020 - Luigi Baldoni <aloisio@gmx.com>
+
+- Update to version 5.9.1
+  * Disallow prepipe within .mlrrc (fixes CVE-2020-15167)
+
 -------------------------------------------------------------------
 Wed Aug 19 20:26:12 UTC 2020 - aloisio@gmx.com
 
diff --git a/miller.spec b/miller.spec
index 10ae14d..ad132b2 100644
--- a/miller.spec
+++ b/miller.spec
@@ -17,7 +17,7 @@
 
 
 Name:           miller
-Version:        5.9.0
+Version:        5.9.1
 Release:        0
 Summary:        Name-indexed data processing tool
 # c/lib/netbsd_strptime.c is BSD-4-Clause