diff --git a/exim-4.92.2.tar.bz2 b/exim-4.92.2.tar.bz2
deleted file mode 100644
index f2433aa..0000000
--- a/exim-4.92.2.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:557f97c3f75c19a2e7da8511a8b94c28b39a5d5206948be5ceac96c75a2eccf6
-size 1933063
diff --git a/exim-4.92.2.tar.bz2.asc b/exim-4.92.2.tar.bz2.asc
deleted file mode 100644
index d9b5a8e..0000000
--- a/exim-4.92.2.tar.bz2.asc
+++ /dev/null
@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQEzBAABCgAdFiEE0L/WueylaUpvFJ3Or0zGdqa2wUIFAl1uO6cACgkQr0zGdqa2
-wUJnoAgAzQvg1QmtCxAO/Qva1Coc8K9wTQDIYRhYDPSRX6b6jJsIzXSzgK5cqj3E
-Mfly/uvPKFBshKi2YxcXl5p1ILfHGP+XYEK+M7X+XEBRBW8odSgMCI9yh79acx3z
-dctuTHbTja+6vUToDaKl76v2ZDP9Dfp9yfY8d1OPDTsyAc8QdTcQbzWRl1CIo+cI
-QgDZ0LTPoPLu/cGZ+3MKhfPoyYXzUVhAWTHRZgdNKnSgTksmgS05o7Lulyjrcggz
-Pis4SyqleyqpnT5yfVYP/W48qMlnQmvWywjWQ5vD3sxodCjh89HEU/2ge2N+qAjz
-iC1ytDM0+K+jMbtnPqsFY96dYjP00w==
-=BWrd
------END PGP SIGNATURE-----
diff --git a/exim-4.93.tar.bz2 b/exim-4.93.tar.bz2
new file mode 100644
index 0000000..17cede0
--- /dev/null
+++ b/exim-4.93.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:22c432c0585ef605c52bc796042c4823e961f58a7e6ad1486252e203bf4c9276
+size 1972841
diff --git a/exim-4.93.tar.bz2.asc b/exim-4.93.tar.bz2.asc
new file mode 100644
index 0000000..8dec843
--- /dev/null
+++ b/exim-4.93.tar.bz2.asc
@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCgAdFiEE0L/WueylaUpvFJ3Or0zGdqa2wUIFAl3tO+IACgkQr0zGdqa2
+wUKtHAgA1PnCXAoftGZA/XQW0+q3OyEHUNPfPMUWYdU1drdquuUDS1S08WIb90M0
+ShYxjixUMWVoQd4Fru7CZXDeljXnIdN25Ahm0wi9zeery/vP8NXhahvMvV0585lU
+PLmYl2nfwceNbVXdtqlt6L5x1hM7vDOerh+0UZGITmlY49v41TGySHf16qiBkoJW
+GCL9mhHULzW+8rDFxOoZEongst0XVUtrfDSUUz878ouXkXmoBHpYS0WOxpku7/x/
+/+f/eKQ9MzutYQTE37hBjPpqjDuYGKZYnVNGW2i60DtcOsC0bi/wsIOadTkq0iQc
+oBg2pGOGGBs/zwSFKa3wLlMqU7ML9Q==
+=28mJ
+-----END PGP SIGNATURE-----
diff --git a/exim.changes b/exim.changes
index f1a5d13..10ffa11 100644
--- a/exim.changes
+++ b/exim.changes
@@ -1,3 +1,27 @@
+-------------------------------------------------------------------
+Mon Dec  9 10:08:02 UTC 2019 - wullinger@rz.uni-kiel.de
+
+- update to exim 4.93
+  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
+  * DISABLE_TLS replaces SUPPORT_TLS
+  * Bump the version for the local_scan API.
+  * smtp transport option hosts_try_fastopen defaults to "*".
+  * DNSSec is requested (not required) for all queries. (This seemes to
+    ask for trouble if your resolver is a systemd-resolved.)
+  * Generic router option retry_use_local_part defaults to "true" under specific
+    pre-conditions.
+  * Introduce a tainting mechanism for values read from untrusted sources.
+  * Use longer file names for temporary spool files (this avoids
+    name conflicts with spool on a shared file system).
+  * Use dsn_from main config option (was ignored previously).
+
+-------------------------------------------------------------------
+Mon Sep 30 15:39:54 UTC 2019 - poeml@cmdline.net
+
+- update to exim 4.92.3
+  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
+    remote code execution seems to be possible
+
 -------------------------------------------------------------------
 Sat Sep  7 18:22:08 UTC 2019 - poeml@cmdline.net
 
diff --git a/exim.spec b/exim.spec
index 176f889..7c73fdb 100644
--- a/exim.spec
+++ b/exim.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package exim
 #
-# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2019 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -52,7 +52,7 @@ BuildRequires:  pkgconfig(libssl)
 BuildRequires:  pkgconfig(xaw7)
 BuildRequires:  pkgconfig(xmu)
 BuildRequires:  pkgconfig(xt)
-Url:            http://www.exim.org/
+URL:            http://www.exim.org/
 Conflicts:      sendmail sendmail-tls postfix
 Provides:       smtp_daemon
 %if %{?suse_version:%suse_version}%{?!suse_version:0} > 800
@@ -72,7 +72,7 @@ Requires(pre):  group(mail)
 %endif
 Requires(pre):  fileutils textutils
 %endif
-Version:        4.92.2
+Version:        4.93
 Release:        0
 %if %{with_mysql}
 BuildRequires:  mysql-devel
@@ -197,7 +197,7 @@ cat <<-EOF > Local/Makefile
 	LOOKUP_PASSWD=yes
 	# LOOKUP_WHOSON=yes
 	CYRUS_SASLAUTHD_SOCKET=/var/run/sasl2/mux
-	LOOKUP_LIBS=-llber
+	LOOKUP_LIBS=-llber -lnsl
 %if %{with_ldap}
 	LDAP_LIB_TYPE=OPENLDAP2
 	LOOKUP_LIBS+=-lldap
@@ -224,6 +224,7 @@ cat <<-EOF > Local/Makefile
 	AUTH_DOVECOT=yes
     AUTH_TLS=yes
 	AUTH_LIBS=-lsasl2
+    USE_OPENSSL=yes
 	SUPPORT_TLS=yes
 	TLS_LIBS=-lssl -lcrypto
 	INFO_DIRECTORY=%{_infodir}
@@ -273,7 +274,7 @@ cat <<-EOF > Local/Makefile
 	HAVE_IPV6=YES
     SUPPORT_SPF=yes
 	LOOKUP_LIBS+=-lspf2
-    #EXPERIMENTAL_DMARC=yes
+    #SUPPORT_DMARC=yes
 	#CFLAGS += -I/usr/local/include
 	#LDFLAGS += -lopendmarc
 	EXPERIMENTAL_EVENT=yes
@@ -289,7 +290,7 @@ cat <<-EOF > Local/Makefile
 	EXPERIMENTAL_INTERNATIONAL=yes
 %endif
 	LDFLAGS += -lidn
-	CFLAGS=$RPM_OPT_FLAGS -Wall $CFLAGS_OPT_WERROR -fno-strict-aliasing -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -DLDAP_DEPRECATED $fPIE
+	CFLAGS=$RPM_OPT_FLAGS -std=gnu99 -Wall $CFLAGS_OPT_WERROR -fno-strict-aliasing -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -DLDAP_DEPRECATED $fPIE
 	EXTRALIBS=-ldl -lpam -L/usr/X11R6/%{_lib} $pie
 EOF
 touch Local/eximon.conf