diff --git a/aiohttp-3.9.3.tar.gz b/aiohttp-3.9.3.tar.gz
deleted file mode 100644
index 7dbcf31..0000000
--- a/aiohttp-3.9.3.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:90842933e5d1ff760fae6caca4b2b3edba53ba8f4b71e95dacf2818a2aca06f7
-size 7499669
diff --git a/aiohttp-3.9.5.tar.gz b/aiohttp-3.9.5.tar.gz
new file mode 100644
index 0000000..8489f7c
--- /dev/null
+++ b/aiohttp-3.9.5.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:edea7d15772ceeb29db4aff55e482d4bcfb6ae160ce144f2682de02f6d693551
+size 7504841
diff --git a/python-aiohttp.changes b/python-aiohttp.changes
index c689d15..4187c17 100644
--- a/python-aiohttp.changes
+++ b/python-aiohttp.changes
@@ -1,3 +1,45 @@
+-------------------------------------------------------------------
+Sat Apr 20 13:59:35 UTC 2024 - Dirk Müller <dmueller@suse.com>
+
+- update to 3.9.5:
+  * Fixed "Unclosed client session" when initialization of
+    :py:class:`~aiohttp.ClientSession` fails
+  * Fixed regression (from :pr:`8280`) with adding Content-
+    Disposition to the form-data part after appending to writer
+  * Added default Content-Disposition in multipart/form-data
+    responses to avoid broken form-data responses
+  * The asynchronous internals now set the underlying causes when
+    assigning exceptions to the future objects
+  * Treated values of Accept-Encoding header as case-insensitive
+    when checking for gzip files
+  * Improved the DNS resolution performance on cache hit
+  * Changed the type annotations to allow dict on
+    :meth:`aiohttp.MultipartWriter.append`,
+    :meth:`aiohttp.MultipartWriter.append_json` and
+    :meth:`aiohttp.MultipartWriter.append_form` -- by
+    :user:`cakemanny` Related issues and pull requests on GitHub:
+    :issue:`7741`.
+  * Ensure websocket transport is closed when client does not
+    close it
+  * Leave websocket transport open if receive times out or is
+    cancelled
+  * Fixed content not being read when an upgrade request was not
+    supported with the pure Python implementation.
+  * Fixed a race condition with incoming connections during
+    server shutdown
+  * Fixed multipart/form-data compliance with RFC 7578
+  * Fixed blocking I/O in the event loop while processing files
+    in a POST request
+  * Escaped filenames in static view
+  * Fixed the pure python parser to mark a connection as closing
+    when a response has no length
+  * Upgraded llhttp to 9.2.1, and started rejecting obsolete line
+    folding in Python parser to match
+  * Deprecated content_transfer_encoding parameter in
+    :py:meth:`FormData.add_field()
+  * Added a note about canceling tasks to avoid delaying server
+    shutdown
+
 -------------------------------------------------------------------
 Mon Mar  4 20:40:03 UTC 2024 - Ben Greiner <code@bnavigator.de>
 
diff --git a/python-aiohttp.spec b/python-aiohttp.spec
index 566c131..ae46516 100644
--- a/python-aiohttp.spec
+++ b/python-aiohttp.spec
@@ -19,7 +19,7 @@
 %bcond_with docs
 %{?sle15_python_module_pythons}
 Name:           python-aiohttp
-Version:        3.9.3
+Version:        3.9.5
 Release:        0
 Summary:        Asynchronous HTTP client/server framework
 License:        Apache-2.0