diff --git a/Babel-2.9.0.tar.gz b/Babel-2.9.0.tar.gz
deleted file mode 100644
index f38b7d7..0000000
--- a/Babel-2.9.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:da031ab54472314f210b0adcff1588ee5d1d1d0ba4dbd07b94dba82bde791e05
-size 8682986
diff --git a/Babel-2.9.1.tar.gz b/Babel-2.9.1.tar.gz
new file mode 100644
index 0000000..b8b7449
--- /dev/null
+++ b/Babel-2.9.1.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:bc0c176f9f6a994582230df350aa6e05ba2ebe4b3ac317eab29d9be5d2768da0
+size 8683505
diff --git a/python-Babel.changes b/python-Babel.changes
index e8d3291..b4c30aa 100644
--- a/python-Babel.changes
+++ b/python-Babel.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Tue May 11 21:40:39 UTC 2021 - Dirk Müller <dmueller@suse.com>
+
+- update to 2.9.1:
+  * The internal locale-data loading functions now validate the name of the
+    locale file to be loaded and only allow files within Babel's data directory.  
+
 -------------------------------------------------------------------
 Fri Mar  5 10:31:45 UTC 2021 - Markéta Machová <mmachova@suse.com>
 
diff --git a/python-Babel.spec b/python-Babel.spec
index b2c0377..7e93cd0 100644
--- a/python-Babel.spec
+++ b/python-Babel.spec
@@ -19,7 +19,7 @@
 %{?!python_module:%define python_module() python-%{**} python3-%{**}}
 %define oldpython python
 Name:           python-Babel
-Version:        2.9.0
+Version:        2.9.1
 Release:        0
 Summary:        Internationalization utilities
 License:        BSD-3-Clause
@@ -34,7 +34,7 @@ BuildRequires:  fdupes
 BuildRequires:  python-rpm-macros
 Requires:       python-pytz >= 2015.7
 Requires(post): update-alternatives
-Requires(postun): update-alternatives
+Requires(postun):update-alternatives
 BuildArch:      noarch
 %ifpython2
 Obsoletes:      %{oldpython}-babel < %{version}