diff --git a/.gitignore b/.gitignore
index 4d54d4f..df55f95 100644
--- a/.gitignore
+++ b/.gitignore
@@ -54,3 +54,4 @@ samba-3.6.0pre1.tar.gz
 /samba-4.2.6.tar.xz
 /samba-4.2.7.tar.xz
 /samba-4.2.8.tar.xz
+/samba-4.2.9.tar.xz
diff --git a/samba.spec b/samba.spec
index 67b0bf7..ca4b210 100644
--- a/samba.spec
+++ b/samba.spec
@@ -8,7 +8,7 @@
 
 %define main_release 0
 
-%define samba_version 4.2.8
+%define samba_version 4.2.9
 %define talloc_version 2.1.2
 %define ntdb_version 1.0
 %define tdb_version 1.3.6
@@ -1941,6 +1941,10 @@ rm -rf %{buildroot}
 %endif # with_clustering_support
 
 %changelog
+* Tue Mar 08 2016 Guenther Deschner <gdeschner@redhat.com> - 4.2.9-0
+- Update to Samba 4.2.9
+- resolves: #1315942 - CVE-2015-7560 Incorrect ACL get/set allowed on symlink path
+
 * Wed Feb 17 2016 Guenther Deschner <gdeschner@redhat.com> - 4.2.8-0
 - Update to Samba 4.2.8
 
diff --git a/sources b/sources
index c507ac8..cd0375d 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-e929b6226f92ed86ac1d59cd96e85b00  samba-4.2.8.tar.xz
+46fe2df7fa86f224c27c1f64926a697b  samba-4.2.9.tar.xz