diff --git a/.gitignore b/.gitignore
index 3f5ecb0..0c57537 100644
--- a/.gitignore
+++ b/.gitignore
@@ -20,3 +20,4 @@
 /nftables-0.9.6.tar.bz2
 /nftables-0.9.7.tar.bz2
 /nftables-0.9.8.tar.bz2
+/nftables-0.9.9.tar.bz2
diff --git a/nftables.spec b/nftables.spec
index 0f1d5eb..ec5df83 100644
--- a/nftables.spec
+++ b/nftables.spec
@@ -1,6 +1,6 @@
 Name:           nftables
-Version:        0.9.8
-Release:        3%{?dist}
+Version:        0.9.9
+Release:        1%{?dist}
 # Upstream released a 0.100 version, then 0.4. Need Epoch to get back on track.
 Epoch:          1
 Summary:        Netfilter Tables userspace utillites
@@ -74,6 +74,8 @@ cp -a %{SOURCE2} $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/
 chmod 600 $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/nftables.conf
 
 mkdir -m 700 -p $RPM_BUILD_ROOT/%{_sysconfdir}/nftables
+mv $RPM_BUILD_ROOT/%{_datadir}/nftables/*.nft \
+	$RPM_BUILD_ROOT/%{_sysconfdir}/nftables/
 chmod 600 $RPM_BUILD_ROOT/%{_sysconfdir}/nftables/*.nft
 chmod 700 $RPM_BUILD_ROOT/%{_sysconfdir}/nftables
 
@@ -116,6 +118,9 @@ sed -i -e 's/\(sofile=\)".*"/\1"'$sofile'"/' \
 %{python3_sitelib}/nftables/
 
 %changelog
+* Wed Jun 02 2021 Phil Sutter <psutter@redhat.com> - 1:0.9.9-1
+- Update to 0.9.9. Fixes rhbz#1964718
+
 * Tue Mar 02 2021 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1:0.9.8-3
 - Rebuilt for updated systemd-rpm-macros
   See https://pagure.io/fesco/issue/2583.
diff --git a/sources b/sources
index 58d492a..4724f25 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (nftables-0.9.8.tar.bz2) = 1c5709825c8b2c13cbed0310658959ecee164c930bc9e2447618a0894598138b9a549d20509c32a5c23ce99e40438df38f9e170cf656ce993d819f365490a180
+SHA512 (nftables-0.9.9.tar.bz2) = dfdd3ffc0ffc1742ca0494a3f8fac1c7b2fe942849e60d33fc3cb8a51e27bd39e1ccfeda2195191377a32bb5363ea244f4c3e71b4a6d930f33bf87e17a534fab