diff --git a/.gitignore b/.gitignore
index 8249a75..7dc1c43 100644
--- a/.gitignore
+++ b/.gitignore
@@ -18,3 +18,5 @@
 /opendnssec-2.1.6.tar.gz
 /opendnssec-2.1.7.tar.gz
 /opendnssec-2.1.8.tar.gz
+/opendnssec-2.1.9.tar.gz
+/opendnssec-2.1.9.tar.gz.sig
diff --git a/opendnssec.spec b/opendnssec.spec
index 25a5866..af49b70 100644
--- a/opendnssec.spec
+++ b/opendnssec.spec
@@ -3,8 +3,8 @@
 
 Summary: DNSSEC key and zone management software
 Name: opendnssec
-Version: 2.1.8
-Release: 2%{?dist}
+Version: 2.1.9
+Release: 1%{?dist}
 License: BSD
 Url: http://www.opendnssec.org/
 Source0: http://www.opendnssec.org/files/source/%{?prever:testing/}%{name}-%{version}%{?prever}.tar.gz
@@ -178,6 +178,10 @@ ods-enforcer update all >/dev/null 2>/dev/null ||:
 %systemd_postun_with_restart ods-signerd.service
 
 %changelog
+* Tue Jul 06 2021 François Cami <fcami@redhat.com> - 2.1.9-1
+- Update to 2.1.9 (rhbz#1956561). Solves OPENDNSSEC-955 and OPENDNSSEC-956.
+- Known issue: OPENDNSSEC-957: Signer daemon stops with failure exit code even when no error occured.
+
 * Tue Mar 02 2021 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.1.8-2
 - Rebuilt for updated systemd-rpm-macros
   See https://pagure.io/fesco/issue/2583.
diff --git a/sources b/sources
index e8c6324..6d1eac2 100644
--- a/sources
+++ b/sources
@@ -1 +1,2 @@
-SHA512 (opendnssec-2.1.8.tar.gz) = 48fa9e1efe54d00bba1c97d42d8680a7b33d90360cbb12e333835384447a9d42ffc6508ee6b455bfa4522907b371d4703068e4fd184fd72ea6d950427029cc1c
+SHA512 (opendnssec-2.1.9.tar.gz) = 011a50606559651db1787949dcedbbc8727b8ec5c71e95425bfdae94b6db6b731e662ce4cb9f05b34d4ec3512067227869a72a2b2c8a6c14eb547036e4b6e02e
+SHA512 (opendnssec-2.1.9.tar.gz.sig) = a3e60e231dfe2a3bdcc0756a4cc601d6b4aef7e98b8a60b19b0e51a8ab2efb5b75c1a72f87a1b95378d0f5d586dd6952ffd13b8c13aaac7bcb3dae637df9b909