diff --git a/curl-8.9.0.tar.xz b/curl-8.9.0.tar.xz
deleted file mode 100644
index 2622342..0000000
--- a/curl-8.9.0.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ff09b2791ca56d25fd5c3f3a4927dce7c8a9dc4182200c487ca889fba1fdd412
-size 2781828
diff --git a/curl-8.9.0.tar.xz.asc b/curl-8.9.0.tar.xz.asc
deleted file mode 100644
index 285ddbe..0000000
--- a/curl-8.9.0.tar.xz.asc
+++ /dev/null
@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQEzBAABCgAdFiEEJ+3q8i86vOtQ25oSXMkI/bceEsIFAmagncYACgkQXMkI/bce
-EsIf4wf/RVl/4hrfHsntyMCoM/SnY/PZlWommcAnfmSff0OAKV6OvtINkPUAyBdg
-T1PGwkbPOLHB93NBFOm7bjSixbNgRL58gR3Rh+kvMKzx7G2Ug/gpWH3c8JHvwsHw
-S4TCjuVGYsAWDn9/3y3qQNypmUMV8tIWslXoya5F9GtrnJEFItQ1efPPIra9nTtx
-9XRrmB2/EUvPsdKmkztNP8NYaEyYDVPst+1HUv8+UdK5GL1wG8rAp2vPiofvHRDe
-l9AiGu+d9U+UuqO8vNhqc46ii+h4Uj8Sk51mNf88TKAhEdKvPUMEaaySQzu23CKr
-TCyqjvRyY12mEGT0bOX2xIsf0C665g==
-=GGbI
------END PGP SIGNATURE-----
diff --git a/curl-8.9.1.tar.xz b/curl-8.9.1.tar.xz
new file mode 100644
index 0000000..807d384
--- /dev/null
+++ b/curl-8.9.1.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:f292f6cc051d5bbabf725ef85d432dfeacc8711dd717ea97612ae590643801e5
+size 2782364
diff --git a/curl-8.9.1.tar.xz.asc b/curl-8.9.1.tar.xz.asc
new file mode 100644
index 0000000..bda8785
--- /dev/null
+++ b/curl-8.9.1.tar.xz.asc
@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCgAdFiEEJ+3q8i86vOtQ25oSXMkI/bceEsIFAmap30kACgkQXMkI/bce
+EsKX+wf/brccw5rGTAbmjj7WGBfbAmwrSsDexTXRiEBXT/+qhkWIplN6wdtsZ86I
+tUraaapoyvRKLa3Wxlv9fSF/xXji+5lhO/W9pfWxwZNeSZFiOgKcK/Li4Fx0c7t4
+WpxkAbRvbJreA40BR32qSgnNNjKU5QX/ivf67B1EFL71kgsCW/QczB6mcuxszlkN
+ro39Jb8hDtnAD3hHXrTEaW3lOEgf/Jo/a1Zii3+W3OkW+uZHwzUoqe+HLGHYM2vW
+Q3hBVQaEWmNIwArA73s/kOiFATLthUTvSJO56ebLQJFHJf61cwqSsg2o07i5SqEc
+QlKzV/h7ydbBWdHiSTpCMxue7tLUZw==
+=EiUG
+-----END PGP SIGNATURE-----
diff --git a/curl.changes b/curl.changes
index 26e4362..a7cb73b 100644
--- a/curl.changes
+++ b/curl.changes
@@ -1,3 +1,24 @@
+-------------------------------------------------------------------
+Wed Jul 31 08:20:44 UTC 2024 - Pedro Monreal <pmonreal@suse.com>
+
+- Update to 8.9.1:
+  * Security fixes:
+    - curl: ASN.1 date parser overread [bsc#1228535, CVE-2024-7264]
+  * Bugfixes:
+    - cmake: detect 'libssh' via 'pkg-config'
+    - cmake: detect 'nettle' when building with GnuTLS
+    - connect: fix connection shutdown for event based processing
+    - curl: more defensive socket code for --ip-tos
+    - CURLOPT_SSL_CTX_FUNCTION.md: mention CA caching
+    - CURLSHOPT_SHARE.md: mention sessions/cookies as not thread-safe
+    - ftpserver.pl: make POP3 LIST serve content from the test file
+    - lib: survive some NULL input args
+    - os400: build cli manual.
+    - os400: workaround an IBM ASCII run-time library bug
+    - transfer: speed limiting fix for 32bit systems
+    - vtls: avoid forward declaration in MultiSSL builds
+    - x509asn1: unittests and fixes for gtime2str
+
 -------------------------------------------------------------------
 Wed Jul 24 07:07:57 UTC 2024 - Pedro Monreal <pmonreal@suse.com>
 
diff --git a/curl.spec b/curl.spec
index 2334e3b..53c6dd8 100644
--- a/curl.spec
+++ b/curl.spec
@@ -29,7 +29,7 @@
 %endif
 
 Name:           curl%{?psuffix}
-Version:        8.9.0
+Version:        8.9.1
 Release:        0
 Summary:        A Tool for Transferring Data from URLs
 License:        curl