diff --git a/openscap-0.9.0.tar.gz b/openscap-0.9.0.tar.gz
deleted file mode 100644
index bf4e152..0000000
--- a/openscap-0.9.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:3cf2d7d9fda9cf0ea2fbdb8c4753511ffcc0a2938ed29cee47e343b97b5870c0
-size 9265625
diff --git a/openscap-0.9.1.tar.gz b/openscap-0.9.1.tar.gz
new file mode 100644
index 0000000..c957c07
--- /dev/null
+++ b/openscap-0.9.1.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4601ffd6c1b5d0e9025e49db194f2e7f7d7fef1826981bb212ef543c28e94fe6
+size 10744598
diff --git a/openscap-0.9.1.tar.gz.sha1sum b/openscap-0.9.1.tar.gz.sha1sum
new file mode 100644
index 0000000..70882be
--- /dev/null
+++ b/openscap-0.9.1.tar.gz.sha1sum
@@ -0,0 +1 @@
+87208d379e4e5bdb94b9b942b30f1ede38e2f756  openscap-0.9.1.tar.gz
diff --git a/openscap.changes b/openscap.changes
index ad75437..ccf7999 100644
--- a/openscap.changes
+++ b/openscap.changes
@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Thu Oct 25 14:26:53 UTC 2012 - meissner@suse.com
+
+- updated to 0.9.1:
+  - the http in the check-content-ref/@hrefhref support
+  - the cpedict support
+  - obsoleted the oscap_reporter
+  - send start and finish messages to the syslog
+  - the XCCDF multi-check evaluation support
+  - "oscap oval validate-xml" autodetect a document type
+  - bug fixes
+
 -------------------------------------------------------------------
 Fri Sep 28 07:54:36 UTC 2012 - meissner@suse.com
 
diff --git a/openscap.spec b/openscap.spec
index 15452ac..59345ff 100644
--- a/openscap.spec
+++ b/openscap.spec
@@ -20,9 +20,10 @@
 %define with_bindings 0
 
 Name:           openscap
-Version:        0.9.0
+Version:        0.9.1
 Release:        1.0
 Source:         https://fedorahosted.org/releases/o/p/openscap/%name-%version.tar.gz
+Source3:        https://fedorahosted.org/releases/o/p/openscap/%name-%version.tar.gz.sha1sum
 Source1:        oscap-scan.init
 Source2:        sysconfig.oscap-scan
 # SUSE specific profile, based on yast2-security