diff --git a/babel.spec b/babel.spec
index 3a863de..1857a19 100644
--- a/babel.spec
+++ b/babel.spec
@@ -7,8 +7,8 @@
 %bcond_with bootstrap
 
 Name:           babel
-Version:        2.9.0
-Release:        6%{?dist}
+Version:        2.9.1
+Release:        1%{?dist}
 Summary:        Tools for internationalizing Python applications
 
 License:        BSD
@@ -115,6 +115,11 @@ export TZ=UTC
 %endif
 
 %changelog
+* Fri May 21 2021 Charalampos Stratakis <cstratak@redhat.com> - 2.9.1-1
+- Update to 2.9.1.
+- Fixes CVE-2021-20095
+Resolves: rhbz#1955615
+
 * Thu Apr 15 2021 Mohan Boddu <mboddu@redhat.com> - 2.9.0-6
 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
 
diff --git a/sources b/sources
index a6ff9c5..bf759d1 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (Babel-2.9.0.tar.gz) = 250d1a19741eb0d1bda9d6b862f2d4779b6c67f10b8e045f450a271a16587e30f26f35ccccfea8ca13bb519582d2ef83569fa4381d0590fb9b61bf3ebf67e5f6
+SHA512 (Babel-2.9.1.tar.gz) = 89a2ce18301b522907bb66ec5453cbcd4c6b2d494d6928c9c62dc07bd8b6983982db571a85e251a1ea413b6f76fbd515f65c67c9bccf5441c62d351a57f2f4d0