diff --git a/git-2.48.0.tar.sign b/git-2.48.0.tar.sign
deleted file mode 100644
index 0e3dd50..0000000
Binary files a/git-2.48.0.tar.sign and /dev/null differ
diff --git a/git-2.48.0.tar.xz b/git-2.48.0.tar.xz
deleted file mode 100644
index 0aa136d..0000000
--- a/git-2.48.0.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:4803b809c42696b3b8cce6b0ba6de26febe1197f853daf930a484db93c1ad0d5
-size 7723336
diff --git a/git-2.48.1.tar.sign b/git-2.48.1.tar.sign
new file mode 100644
index 0000000..6cf0d7a
Binary files /dev/null and b/git-2.48.1.tar.sign differ
diff --git a/git-2.48.1.tar.xz b/git-2.48.1.tar.xz
new file mode 100644
index 0000000..3d5bb43
--- /dev/null
+++ b/git-2.48.1.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:1c5d545f5dc1eb51e95d2c50d98fdf88b1a36ba1fa30e9ae5d5385c6024f82ad
+size 7723580
diff --git a/git.changes b/git.changes
index 65d6d8e..23ff952 100644
--- a/git.changes
+++ b/git.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Tue Jan 14 21:45:04 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- update to 2.48.1: (boo#1235600 boo#1235601)
+  * CVE-2024-50349, CVE-2024-52006: 
+    refuse to accept URLs that contain control sequences
+
 -------------------------------------------------------------------
 Mon Jan 13 20:00:00 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
 
diff --git a/git.spec b/git.spec
index e50d914..afd0d5c 100644
--- a/git.spec
+++ b/git.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package git
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
 # Copyright (c) 2025 Andreas Stieger <Andreas.Stieger@gmx.de>
 #
 # All modifications and additions to the file contributed by third parties
@@ -43,7 +43,7 @@
 %bcond_with    asciidoctor
 %endif
 Name:           git
-Version:        2.48.0
+Version:        2.48.1
 Release:        0
 Summary:        Fast, scalable, distributed revision control system
 License:        GPL-2.0-only