diff --git a/strongswan-5.9.13.tar.bz2 b/strongswan-5.9.13.tar.bz2
deleted file mode 100644
index 49c0157..0000000
--- a/strongswan-5.9.13.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:56e30effb578fd9426d8457e3b76c8c3728cd8a5589594b55649b2719308ba55
-size 4825644
diff --git a/strongswan-5.9.13.tar.bz2.sig b/strongswan-5.9.13.tar.bz2.sig
deleted file mode 100644
index a6c5dc1..0000000
--- a/strongswan-5.9.13.tar.bz2.sig
+++ /dev/null
@@ -1,14 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQGzBAABCgAdFiEElI8Vik52onvz0HUy30LBcLNNuncFAmVpfW0ACgkQ30LBcLNN
-une8vgwAkgbx9XY1G2tML+5nT9rmipUAARzah9aYzN0VeBemtd5In52ofFsjgYD2
-UdiC4HSJfe7iYvDBF76CnStqptNsqJgJrDv9FkQ3a83w2zPzMLHRDzWVM1eNLr0O
-wz8SyhDQIxypVbja28Ey9KlHOnOvjzA7G/F9Z61gRZvBl6Rv/b83ze74VJBJ4yEp
-t0fTvdixj/PnutiSoTvV9rnuDkRjpFjWDa4pxuvjdHdIfR1Krh0F0ofpsvfvBBMc
-Nna1dppXFDvUeDhWfud6PQ4npEBD5e8qKYzjEmBk3FCaRm/76Vzo/p8nhEJpYLgz
-ZOWno0g5oMiALV/+lDzU1Fphj6jJXH3YC7yzhob6452eb+SJHyMTA0v4dednezH8
-AyyK6raUca4GwN/1kcEdhdIDNUJrLmL2LgpDZtVlElmrbGcxGbDedkMNRGm3WbAI
-2sExRdzTp5bCcm1g+nmXsr1e/gGVJRC8PCwn5/bLkO/ETSNetN/xCHeLJgonjeJ4
-TPJMcPZ4
-=yPcK
------END PGP SIGNATURE-----
diff --git a/strongswan-5.9.14.tar.bz2 b/strongswan-5.9.14.tar.bz2
new file mode 100644
index 0000000..ca34227
--- /dev/null
+++ b/strongswan-5.9.14.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:728027ddda4cb34c67c4cec97d3ddb8c274edfbabdaeecf7e74693b54fc33678
+size 4869709
diff --git a/strongswan-5.9.14.tar.bz2.sig b/strongswan-5.9.14.tar.bz2.sig
new file mode 100644
index 0000000..d8f021c
--- /dev/null
+++ b/strongswan-5.9.14.tar.bz2.sig
@@ -0,0 +1,14 @@
+-----BEGIN PGP SIGNATURE-----
+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+=dVex
+-----END PGP SIGNATURE-----
diff --git a/strongswan.changes b/strongswan.changes
index 3c06b42..6f1081a 100644
--- a/strongswan.changes
+++ b/strongswan.changes
@@ -1,3 +1,16 @@
+-------------------------------------------------------------------
+Tue Mar 19 13:58:13 UTC 2024 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 5.9.14
+  * Support for the IKEv2 OCSP extensions (RFC 4806) has been
+    added, which allows peers to request and send OCSP responses
+    directly in IKEv2.
+  * Validation of X.509 name constraints in the constraints plugin
+    has been refactored to align with RFC 5280.
+  * Fail SA installation on Linux if replay protection is disabled
+    while ESN is enabled, which the kernel currently doesn't
+    support.
+
 -------------------------------------------------------------------
 Mon Feb 26 13:31:08 UTC 2024 - Dominique Leuenberger <dimstar@opensuse.org>
 
diff --git a/strongswan.spec b/strongswan.spec
index aa2f4f1..b4afa5a 100644
--- a/strongswan.spec
+++ b/strongswan.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package strongswan
 #
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:           strongswan
-Version:        5.9.13
+Version:        5.9.14
 Release:        0
 %define         upstream_version     %{version}
 %define         strongswan_docdir    %{_docdir}/%{name}