diff --git a/security/py-krb5/Makefile b/security/py-krb5/Makefile
index 4e3347a350d3..233059b6c2ee 100644
--- a/security/py-krb5/Makefile
+++ b/security/py-krb5/Makefile
@@ -1,33 +1,33 @@
 PORTNAME=	krb5
-PORTVERSION=	0.8.0
+PORTVERSION=	0.9.0
 CATEGORIES=	security python
 MASTER_SITES=	PYPI
 PKGNAMEPREFIX=	${PYTHON_PKGNAMEPREFIX}
 
 MAINTAINER=	sunpoet@FreeBSD.org
 COMMENT=	Kerberos API bindings for Python
 WWW=		https://github.com/jborean93/pykrb5
 
 LICENSE=	MIT
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 BUILD_DEPENDS=	${PYTHON_PKGNAMEPREFIX}setuptools>=42.0.0:devel/py-setuptools@${PY_FLAVOR} \
 		${PYTHON_PKGNAMEPREFIX}wheel>=0:devel/py-wheel@${PY_FLAVOR}
 
 USES=		python ssl
 USE_PYTHON=	autoplist concurrent cython3 pep517
 
 MAKE_ENV=	KRB5_KRB5CONFIG=${KRB5CONFIG}
 
 OPTIONS_SINGLE=	GSSAPI
 OPTIONS_SINGLE_GSSAPI=	GSSAPI_BASE GSSAPI_HEIMDAL GSSAPI_MIT
 OPTIONS_DEFAULT=GSSAPI_BASE
 
 GSSAPI_BASE_USES=	gssapi
 GSSAPI_HEIMDAL_USES=	gssapi:heimdal
 GSSAPI_MIT_USES=	gssapi:mit
 
 post-install:
 	${FIND} ${STAGEDIR}${PYTHON_SITELIBDIR} -name '*.so' -exec ${STRIP_CMD} {} +
 
 .include <bsd.port.mk>
diff --git a/security/py-krb5/distinfo b/security/py-krb5/distinfo
index a24b53c1c653..be01e2a9cdf3 100644
--- a/security/py-krb5/distinfo
+++ b/security/py-krb5/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1757436543
-SHA256 (krb5-0.8.0.tar.gz) = daaf580cf563a2435cc889d4a0692e02c5788e1eb91f0246d56114cf4f08ba1c
-SIZE (krb5-0.8.0.tar.gz) = 235540
+TIMESTAMP = 1764510992
+SHA256 (krb5-0.9.0.tar.gz) = 4cdd2c85ff4770108edaf48fedf19888cf956ff374e2e97e40f8412b048caee6
+SIZE (krb5-0.9.0.tar.gz) = 236761
diff --git a/security/py-krb5/files/patch-pyproject.toml b/security/py-krb5/files/patch-pyproject.toml
index b3fe07055245..0de5853face7 100644
--- a/security/py-krb5/files/patch-pyproject.toml
+++ b/security/py-krb5/files/patch-pyproject.toml
@@ -1,10 +1,10 @@
---- pyproject.toml.orig	2025-09-01 04:40:28 UTC
+--- pyproject.toml.orig	2025-11-25 18:46:01 UTC
 +++ pyproject.toml
 @@ -1,6 +1,6 @@ requires = [
  [build-system]
  requires = [
--    "Cython == 3.1.3",
-+    "Cython >= 3.1.3",
+-    "Cython == 3.2.1",
++    "Cython >= 3.2.1",
      "setuptools >= 42.0.0",  # Supports license_files
  ]
  build-backend = "setuptools.build_meta"