diff --git a/NEWS.md b/NEWS.md
index bacd551ee9..4203ca1f46 100644
--- a/NEWS.md
+++ b/NEWS.md
@@ -1,3 +1,22 @@
+# Release notes for xrdp v0.9.23.1 (2023/09/27)
+
+This is a security fix release for CVE-2023-42822. This update is recommended for all xrdp users.
+
+## Security fixes
+
+* [CVE-2023-42822: Unchecked access to font glyph info](https://www.cve.org/CVERecord?id=CVE-2023-42822)
+
+## Bug fixes
+No bug fixes other than the above security fix in this release.
+
+## New features
+No new features in this release.
+
+## Internal changes
+* cppcheck install script no longer installs z3 for cppcheck >= 2.8 (#2782)
+
+-----------------------
+
 # Release notes for xrdp v0.9.23 (2023/08/31)
 
 ## General announcements
diff --git a/configure.ac b/configure.ac
index 8e705a905b..55131912c8 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,7 +1,7 @@
 # Process this file with autoconf to produce a configure script
 
 AC_PREREQ(2.65)
-AC_INIT([xrdp], [0.9.23], [xrdp-devel@googlegroups.com])
+AC_INIT([xrdp], [0.9.23.1], [xrdp-devel@googlegroups.com])
 AC_CONFIG_HEADERS(config_ac.h:config_ac-h.in)
 AM_INIT_AUTOMAKE([1.7.2 foreign])
 AC_CONFIG_MACRO_DIR([m4])