diff --git a/.gitignore b/.gitignore
index 74d86c2..b8bc76e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -43,3 +43,4 @@
 /go1.8.3.src.tar.gz
 /go1.9beta2.src.tar.gz
 /go1.9.src.tar.gz
+/go1.9.1.src.tar.gz
diff --git a/golang.spec b/golang.spec
index c042b10..93221f3 100644
--- a/golang.spec
+++ b/golang.spec
@@ -97,7 +97,7 @@
 %global go_version 1.9
 
 Name:           golang
-Version:        1.9
+Version:        1.9.1
 Release:        1%{?dist}
 Summary:        The Go Programming Language
 # source tree includes several copies of Mark.Twain-Tom.Sawyer.txt under Public Domain
@@ -507,6 +507,9 @@ fi
 %endif
 
 %changelog
+* Fri Oct 06 2017 Jakub Čajka <jcajka@redhat.com> - 1.9.1-1
+- fix CVE-2017-15041 and CVE-2017-15042
+
 * Fri Sep 15 2017 Jakub Čajka <jcajka@redhat.com> - 1.9-1
 - bump to the relased version
 
diff --git a/sources b/sources
index fc834b2..4255227 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (go1.9.src.tar.gz) = 70c4b892b6883fb21fc1a547a2b8d174df8c7aca282a3906e3816b4442b16c5da578b69c19443122a4a45e66fc95d170528d826b70932af09f4afd2a46615d74
+SHA512 (go1.9.1.src.tar.gz) = 3c5d11089a54c61acd1a4fad9618ddb2058cc783a54564407ee50e37c864deaadfd5effeab623080c136a599096f448aae091ef41d0afca1abfcdb98adf4a793