diff --git a/strongswan-5.9.4.tar.bz2 b/strongswan-5.9.4.tar.bz2
deleted file mode 100644
index 73b5998..0000000
--- a/strongswan-5.9.4.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:45fdf1a4c2af086d8ff5b76fd7b21d3b6f0890f365f83bf4c9a75dda26887518
-size 4651000
diff --git a/strongswan-5.9.4.tar.bz2.sig b/strongswan-5.9.4.tar.bz2.sig
deleted file mode 100644
index b3f3668..0000000
--- a/strongswan-5.9.4.tar.bz2.sig
+++ /dev/null
@@ -1,14 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQGzBAABCgAdFiEElI8Vik52onvz0HUy30LBcLNNuncFAmFtRUEACgkQ30LBcLNN
-undRkwwAo22C+tsCWS+QFmAZZ7l2pMrYYwCSFJns+wVnzw5+7hhGR3JysoDnf+9A
-706SKcEPWnlXI7BwAk/9hdTDxdzfYQ7FEOJRZVk6+wOsodwR/EJpETj7OLGYbu/u
-tsTIPkJCtVPtO/v+3H4pnrdG+KRNTynN4vNzyWSjwNEw3yGusk0jiidsdhr7I+cy
-X6VG+cOkAVjjyWUHToxUufVEeJybAFhaeR39/mpBLk2xBF4e6/L+BQYjnsqleeAh
-Yj8txL7FgVymsm09LrrzSEcY1ntXRobzKZqDJA8u3fxDvn19hAhb07uo3pnk3G05
-NPvXFNqhYjyY5qaiQxiCXpOEliJUOZuPU4VM2WL2t2obAW1gWEjNXeWc9YjocIEf
-BLGZttfj5iM8Htt486YzdPW4uqR/MnuoRHbr4vFG7NWs4Mw2dAtSQWXu8k/PmoxH
-5gmxJwjyp8WBhEe3ZCczd1bnCz5+Ms8ycq3Icnvd837ZJalXVrxZAma/He83u7fF
-hVkK6RLz
-=05ZP
------END PGP SIGNATURE-----
diff --git a/strongswan-5.9.5.tar.bz2 b/strongswan-5.9.5.tar.bz2
new file mode 100644
index 0000000..5620a12
--- /dev/null
+++ b/strongswan-5.9.5.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:983e4ef4a4c6c9d69f5fe6707c7fe0b2b9a9291943bbf4e008faab6bf91c0bdd
+size 4722123
diff --git a/strongswan-5.9.5.tar.bz2.sig b/strongswan-5.9.5.tar.bz2.sig
new file mode 100644
index 0000000..e0d0f82
--- /dev/null
+++ b/strongswan-5.9.5.tar.bz2.sig
@@ -0,0 +1,14 @@
+-----BEGIN PGP SIGNATURE-----
+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+=asUK
+-----END PGP SIGNATURE-----
diff --git a/strongswan.changes b/strongswan.changes
index 34eb57d..4f2c867 100644
--- a/strongswan.changes
+++ b/strongswan.changes
@@ -1,3 +1,19 @@
+-------------------------------------------------------------------
+Wed Jan 26 12:25:35 UTC 2022 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 5.9.5
+  * Fixed a vulnerability in the EAP client implementation
+    (CVE-2021-45079).
+  * libtpmtss may now establish a secure session via RSA OAEP
+    public key encryption or an ephemeral ECDH key exchange,
+    respectively.
+  * When rekeying CHILD_SAs, the old outbound SA is now
+    uninstalled earlier on the initiator/winner.
+  * The openssl plugin now only announces the ECDH groups
+    actually supported by OpenSSL (determined via
+    EC_get_builtin_curves()).
+  * Added support for AES-CFB.
+
 -------------------------------------------------------------------
 Wed Nov 24 08:25:29 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
 
diff --git a/strongswan.spec b/strongswan.spec
index cb7bec7..11a2112 100644
--- a/strongswan.spec
+++ b/strongswan.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package strongswan
 #
-# Copyright (c) 2020 SUSE LLC
+# Copyright (c) 2022 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:           strongswan
-Version:        5.9.4
+Version:        5.9.5
 Release:        0
 %define         upstream_version     %{version}
 %define         strongswan_docdir    %{_docdir}/%{name}