diff --git a/.files b/.files
index 5b3d7ee..8b00813 100644
Binary files a/.files and b/.files differ
diff --git a/.rev b/.rev
index 3464b5e..3f68cde 100644
--- a/.rev
+++ b/.rev
@@ -827,4 +827,36 @@ numbers for further reference.
     <comment></comment>
     <requestid>864185</requestid>
   </revision>
+  <revision rev="75" vrev="1">
+    <srcmd5>82bd06bcf57989807cba31855de84392</srcmd5>
+    <version>2.9.18</version>
+    <time>1613774735</time>
+    <user>dimstar_suse</user>
+    <comment></comment>
+    <requestid>873717</requestid>
+  </revision>
+  <revision rev="76" vrev="1">
+    <srcmd5>e1a3a3ed0b2455337ac50d9140453c26</srcmd5>
+    <version>2.9.19</version>
+    <time>1615905993</time>
+    <user>RBrownSUSE</user>
+    <comment></comment>
+    <requestid>879379</requestid>
+  </revision>
+  <revision rev="77" vrev="1">
+    <srcmd5>1135e0f73d54ca062bfff726afc9d3e0</srcmd5>
+    <version>2.9.20</version>
+    <time>1618387859</time>
+    <user>dimstar_suse</user>
+    <comment></comment>
+    <requestid>884877</requestid>
+  </revision>
+  <revision rev="78" vrev="2">
+    <srcmd5>3b3597f4db5727ec5b11f12d6601bcb8</srcmd5>
+    <version>2.9.20</version>
+    <time>1618610529</time>
+    <user>dimstar_suse</user>
+    <comment></comment>
+    <requestid>886002</requestid>
+  </revision>
 </revisionlist>
diff --git a/ansible-2.9.17.tar.gz b/ansible-2.9.17.tar.gz
deleted file mode 120000
index 9aa5ffb..0000000
--- a/ansible-2.9.17.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeidmerux6p2dfzxx3bhdndkwo56k7vfo3pe5o3rthy2ipamuij6vh4
\ No newline at end of file
diff --git a/ansible-2.9.17.tar.gz.sha b/ansible-2.9.17.tar.gz.sha
deleted file mode 100644
index 96c4fd9..0000000
--- a/ansible-2.9.17.tar.gz.sha
+++ /dev/null
@@ -1 +0,0 @@
-d78b46d647d91dd478ba7f43baf36ffa27f9a5992b826b16a6cc15cf993f19dc  ansible-2.9.17.tar.gz
diff --git a/ansible-2.9.20.tar.gz b/ansible-2.9.20.tar.gz
new file mode 120000
index 0000000..dfa9673
--- /dev/null
+++ b/ansible-2.9.20.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafybeihfuzubzikmowudgpowemq67h2ilrkx2hlde66ojvvbodawibdzbu
\ No newline at end of file
diff --git a/ansible-2.9.20.tar.gz.sha b/ansible-2.9.20.tar.gz.sha
new file mode 100644
index 0000000..cbbc285
--- /dev/null
+++ b/ansible-2.9.20.tar.gz.sha
@@ -0,0 +1 @@
+73a271b9b2081a254deaa7347583d8bd97142b67c891e463ff2302006c5c8c38  ansible-2.9.20.tar.gz
diff --git a/ansible.changes b/ansible.changes
index 4b5e06b..b9b2112 100644
--- a/ansible.changes
+++ b/ansible.changes
@@ -1,4 +1,41 @@
 -------------------------------------------------------------------
+Fri Apr 16 12:54:09 UTC 2021 - Alexander Graul <alexander.graul@suse.com>
+
+- Drop python-coverage run-time requirement from openSUSE/SLE
+
+-------------------------------------------------------------------
+Fri Apr 16 12:05:06 UTC 2021 - Alexander Graul <alexander.graul@suse.com>
+
+- Switch to python3-cryptography in openSUSE/SLE 
+
+-------------------------------------------------------------------
+Tue Apr 13 07:44:55 UTC 2021 - Michael Ströder <michael@stroeder.com>
+
+- update to version 2.9.20
+  maintenance release containing numerous bugfixes
+
+-------------------------------------------------------------------
+Tue Mar 16 06:54:38 UTC 2021 - Michael Ströder <michael@stroeder.com>
+
+- update to version 2.9.19 with minor changes and a few bug fixes
+
+-------------------------------------------------------------------
+Fri Feb 19 08:40:14 UTC 2021 - Michael Ströder <michael@stroeder.com>
+
+- update to version 2.9.18
+  * CVE-2021-20228 where default and fallback values for no_log parameters
+    to modules were not previously masked.
+  * CVE-2021-20178 where several parameters to the snmp_facts module were
+    logged and displayed despite containing sensitive information.
+  * CVE-2021-20180 where several parameters to the
+    bitbucket_pipeline_variable were logged and displayed despite
+    containing sensitive information.
+  * CVE-2021-20191 which addresses a number of modules whose parameters
+    were logged and displayed despite containing sensitive
+    information. For the full list of affected modules, refer to the
+    changelog linked below.
+  
+-------------------------------------------------------------------
 Tue Jan 19 00:48:05 UTC 2021 - Michael Ströder <michael@stroeder.com>
 
 - update to version 2.9.17 with minor changes and a few bug fixes
diff --git a/ansible.spec b/ansible.spec
index 017c987..8cbd746 100644
--- a/ansible.spec
+++ b/ansible.spec
@@ -195,17 +195,16 @@ BuildRequires:  %{python}-coverage
 BuildRequires:  %{python}-devel
 BuildRequires:  %{python}-jmespath
 BuildRequires:  %{python}-paramiko
-BuildRequires:  %{python}-pycrypto >= 2.6
+BuildRequires:  %{python}-cryptography
 BuildRequires:  %{python}-setuptools > 0.6
 BuildRequires:  %{python}-straight-plugin
 BuildRequires:  fdupes
 Requires:       %{python}-Jinja2
 Requires:       %{python}-PyYAML
-Requires:       %{python}-coverage
 Requires:       %{python}-jmespath
 Requires:       %{python}-paramiko
 Requires:       %{python}-passlib
-Requires:       %{python}-pycrypto >= 2.6
+Requires:       %{python}-cryptography
 Requires:       %{python}-setuptools > 0.6
 Recommends:     %{python}-boto3
 Recommends:     %{python}-botocore
@@ -222,7 +221,7 @@ Recommends:     %{python}-six
 Recommends:     sshpass
 %endif
 Name:           ansible
-Version:        2.9.17
+Version:        2.9.20
 Release:        0
 Summary:        SSH-based configuration management, deployment, and task execution system
 License:        GPL-3.0-or-later