diff --git a/docs/changelog/4.9.rst b/docs/changelog/4.9.rst
index 6892a17a9ef9..2f5133bee69c 100644
--- a/docs/changelog/4.9.rst
+++ b/docs/changelog/4.9.rst
@@ -1,6 +1,80 @@
 Changelogs for 4.9.x
 ====================
 
+.. changelog::
+  :version: 4.9.1
+  :released: 28th of May 2024
+
+  This is release 4.9.1 of the Authoritative Server.
+
+  Please review the :doc:`Upgrade Notes <../upgrading>` before upgrading from versions < 4.9.x.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 14229
+
+    YaHTTP: Enforce max # of request fields and max request line size
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14188
+
+    rpm: Change home directory to /var/lib/pdns
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 14199
+
+    Fix memory leaks in the bind file format parser
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 14186
+
+    dnsproxy: fix build on s390x
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14191
+
+    m4: Add option for 64-bit time_t on 32-bit systems with glibc-2.34
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 14189
+
+    pdnsutil check-zone: accept LUA A/AAAA as SVCB address targets
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 14190
+
+    Properly finalize PKCS11 modules before releasing them
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14187
+
+    Wrap backend factories in smart pointers
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 14058
+
+    don't crash when a catalog SOA is invalid 
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14126
+
+    (optionally) drop whitespace on join
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 13929
+
+    debian: adjust option name in shipped postinst
+
 .. changelog::
   :version: 4.9.0
   :released: 15th of March 2024
diff --git a/docs/secpoll.zone b/docs/secpoll.zone
index da1d61f03423..502a67b0f298 100644
--- a/docs/secpoll.zone
+++ b/docs/secpoll.zone
@@ -1,4 +1,4 @@
-@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2024051501 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2024052801 10800 3600 604800 10800
 @       3600    IN  NS  pdns-public-ns1.powerdns.com.
 @       3600    IN  NS  pdns-public-ns2.powerdns.com.
 
@@ -128,6 +128,7 @@ auth-4.8.4.security-status                              60 IN TXT "1 OK"
 auth-4.9.0-alpha1.security-status                       60 IN TXT "2 Unsupported pre-release (no known vulnerabilities)"
 auth-4.9.0-beta2.security-status                        60 IN TXT "2 Unsupported pre-release (no known vulnerabilities)"
 auth-4.9.0.security-status                              60 IN TXT "1 OK"
+auth-4.9.1.security-status                              60 IN TXT "1 OK"
 
 ; Auth Debian
 auth-3.4.1-2.debian.security-status                     60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/3/security/powerdns-advisory-2015-01/ and https://doc.powerdns.com/3/security/powerdns-advisory-2015-02/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-02/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-03/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-04/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-05/"
diff --git a/docs/upgrading.rst b/docs/upgrading.rst
index 683ac23c9bbf..56d22dbe2435 100644
--- a/docs/upgrading.rst
+++ b/docs/upgrading.rst
@@ -9,7 +9,7 @@ See the `3.X <https://doc.powerdns.com/3/authoritative/upgrading/>`__
 upgrade notes if your version is older than 3.4.2.
 
 4.9.0 to 5.0.0/master
---------------
+---------------------
 
 LUA records whitespace insertion
 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^