diff --git a/gnupg-2.2.18.tar.bz2 b/gnupg-2.2.18.tar.bz2
deleted file mode 100644
index 51e24db..0000000
--- a/gnupg-2.2.18.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:30d37ce2ca55b2b9b61480b2a175a3b22066ab41cd3f84688448919b566dec0a
-size 6740621
diff --git a/gnupg-2.2.18.tar.bz2.sig b/gnupg-2.2.18.tar.bz2.sig
deleted file mode 100644
index 6e5bc38..0000000
Binary files a/gnupg-2.2.18.tar.bz2.sig and /dev/null differ
diff --git a/gnupg-2.2.19.tar.bz2 b/gnupg-2.2.19.tar.bz2
new file mode 100644
index 0000000..45b0b77
--- /dev/null
+++ b/gnupg-2.2.19.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:242554c0e06f3a83c420b052f750b65ead711cc3fddddb5e7274fcdbb4e9dec0
+size 6754972
diff --git a/gnupg-2.2.19.tar.bz2.sig b/gnupg-2.2.19.tar.bz2.sig
new file mode 100644
index 0000000..e3c9845
Binary files /dev/null and b/gnupg-2.2.19.tar.bz2.sig differ
diff --git a/gpg2.changes b/gpg2.changes
index e0d0aee..90fce50 100644
--- a/gpg2.changes
+++ b/gpg2.changes
@@ -1,3 +1,13 @@
+-------------------------------------------------------------------
+Sat Dec  7 15:20:41 UTC 2019 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- update to 2.2.19:
+  * gpg: Fix double free when decrypting for hidden recipients
+  * gpg: Use auto-key-locate for encryption even for mail addressed
+    given with angle brackets
+  * gpgsm: Add special case for certain expired intermediate
+    certificates
+
 -------------------------------------------------------------------
 Wed Nov 27 15:42:22 UTC 2019 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>
 
diff --git a/gpg2.spec b/gpg2.spec
index 54f76da..993d06d 100644
--- a/gpg2.spec
+++ b/gpg2.spec
@@ -17,7 +17,7 @@
 
 
 Name:           gpg2
-Version:        2.2.18
+Version:        2.2.19
 Release:        0
 Summary:        File encryption, decryption, signature creation and verification utility
 License:        GPL-3.0-or-later