diff --git a/autoyast2-4.2.31.tar.bz2 b/autoyast2-4.2.31.tar.bz2
index 1894f9b..63d68a4 100644
--- a/autoyast2-4.2.31.tar.bz2
+++ b/autoyast2-4.2.31.tar.bz2
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:358621cca8d9e521207992e4119260d9f3e9407d64fd6ea33d2f3233034584a1
-size 691020
+oid sha256:63e8a98f97f243b79c2e9062e47e4b7cadec5e613e779b8141039739e08b6003
+size 690942
diff --git a/autoyast2.changes b/autoyast2.changes
index f6fbaf3..a591213 100644
--- a/autoyast2.changes
+++ b/autoyast2.changes
@@ -8,7 +8,7 @@ Wed Mar 11 15:27:34 UTC 2020 - Ancor Gonzalez Sosa <ancor@suse.com>
 Tue Mar 10 10:19:09 CET 2020 - schubi@suse.de
 
 - Security fix: Removed all "--gpg-auto-import-keys" options from
-  zypper commands (bsc#1140711)
+  zypper commands (bsc#1140711) (CVE-2019-18905)
 - 4.2.30
 
 -------------------------------------------------------------------