diff --git a/.gitignore b/.gitignore
index 536e232..efdc86d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -12,3 +12,4 @@
 /mbedtls-2.6.0-apache.tgz
 /mbedtls-2.7.0-apache.tgz
 /mbedtls-2.8.0-apache.tgz
+/mbedtls-2.9.0-apache.tgz
diff --git a/mbedtls.spec b/mbedtls.spec
index 15ffaad..5c3d00c 100644
--- a/mbedtls.spec
+++ b/mbedtls.spec
@@ -3,7 +3,7 @@
 %endif
 
 Name: mbedtls
-Version: 2.8.0
+Version: 2.9.0
 Release: 1%{?dist}
 Summary: Light-weight cryptographic and SSL/TLS library
 Group: System Environment/Libraries
@@ -128,6 +128,9 @@ LD_LIBRARY_PATH=$PWD/library ctest --output-on-failure -V
 %doc apidoc/*
 
 %changelog
+* Wed May 16 2018 Morten Stevens <mstevens@fedoraproject.org> - 2.9.0-1
+- Update to 2.90
+
 * Fri Apr 06 2018 Morten Stevens <mstevens@fedoraproject.org> - 2.8.0-1
 - Update to 2.8.0
 
diff --git a/sources b/sources
index f3a3aa8..a3daf4d 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (mbedtls-2.8.0-apache.tgz) = f70acd91eb1d0173372bfffde98931d3fec39d57cdde223767bc49f2e18c65977e76572e59f921693ed5c4dc3cc67929308e8e483cf2b64831c0f09aaf6a1a01
+SHA512 (mbedtls-2.9.0-apache.tgz) = b0d5d8e6c8a2e0019549e41085cc35354a83499141c72d4fafeb05188f7b624199690bd01fc0d3473c0c8832fc917a556ce3830ea883ed36f36002177be4d66e