diff --git a/sssd-1.14.1.tar.gz b/sssd-1.14.1.tar.gz
deleted file mode 100644
index 62f071c..0000000
--- a/sssd-1.14.1.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ae6fe6c886db5de2b4f1f1fa0e1a10955d8d25bfceff25e475e50a37527c75e0
-size 4949350
diff --git a/sssd-1.14.1.tar.gz.asc b/sssd-1.14.1.tar.gz.asc
deleted file mode 100644
index 7c34a7e..0000000
--- a/sssd-1.14.1.tar.gz.asc
+++ /dev/null
@@ -1,7 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1
-
-iEYEABECAAYFAle3EtUACgkQHsardTLnvCUUmQCePnqDXDrAnLZOqKdKaTCrb/ZS
-cooAoLCGqfUtRQy6BrbRy2tLwMbYVPe5
-=bOBT
------END PGP SIGNATURE-----
diff --git a/sssd-1.14.2.tar.gz b/sssd-1.14.2.tar.gz
new file mode 100644
index 0000000..5771e39
--- /dev/null
+++ b/sssd-1.14.2.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:868660edcdf538e0c0a4889b6b9d600bfdd4036e67b417336a800794cdd7726d
+size 5086805
diff --git a/sssd-1.14.2.tar.gz.asc b/sssd-1.14.2.tar.gz.asc
new file mode 100644
index 0000000..dc90de1
--- /dev/null
+++ b/sssd-1.14.2.tar.gz.asc
@@ -0,0 +1,6 @@
+-----BEGIN PGP SIGNATURE-----
+
+iEYEABECAAYFAlgHxxYACgkQHsardTLnvCVGpgCcDtDKl/ziIOtK3/vD2G7oIacG
+c2sAoIFLv+nACKc37h0SgaewmJkycRGv
+=UHJw
+-----END PGP SIGNATURE-----
diff --git a/sssd.changes b/sssd.changes
index 1190331..34aef48 100644
--- a/sssd.changes
+++ b/sssd.changes
@@ -1,3 +1,33 @@
+-------------------------------------------------------------------
+Wed Oct 19 22:21:30 UTC 2016 - michael@stroeder.com
+
+- Update to new upstream release 1.14.2
+  * Several more regressions caused by cache refactoring to use qualified 
+    names internally were fixed, including a regression that prevented the 
+    krb5_map_user option from working correctly.
+  * A regression when logging in with a smart card using the GDM login manager
+    was fixed
+  * SSSD now removes the internal timestamp on startup cache when the 
+    persistent cache is removed. This enables admins to follow their existing 
+    workflow of just removing the persistent cache and start from a fresh slate
+  * Several fixes to the sssd-secrets responder are present in this release
+  * A bug in the autofs responder that prevented automounter maps from being 
+    returned when sssd_be was offline was fixed
+  * A similar bug in the NSS responder that prevented netgroups from being 
+    returned when sssd_be was offline was fixed
+  * Disabling the netlink integration can now be done with a new option 
+    disable_netlink. Previously, the netlink integration could be disabled with 
+    a sssd command line switch, which is being deprecated in this release.
+  * The internal watchdog no longer kills sssd processes in case time shifts 
+    during sssd runtime
+  * The fail over code is able to cope with concurrent SRV resolution 
+    requests better in this release
+  * The proxy provider gained a new option proxy_max_children that allows the 
+    administrator to control the maximum number of child helper processes that 
+    authenticate users with auth_provider=proxy
+  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects 
+    through a uniqueID property
+
 -------------------------------------------------------------------
 Fri Aug 19 18:38:35 UTC 2016 - michael@stroeder.com
 
diff --git a/sssd.spec b/sssd.spec
index 1f232c3..90b7900 100644
--- a/sssd.spec
+++ b/sssd.spec
@@ -17,7 +17,7 @@
 
 
 Name:           sssd
-Version:        1.14.1
+Version:        1.14.2
 Release:        0
 Summary:        System Security Services Daemon
 License:        GPL-3.0+ and LGPL-3.0+