diff --git a/msmtp-1.8.2.tar.xz b/msmtp-1.8.2.tar.xz
deleted file mode 100644
index 5dc7336..0000000
--- a/msmtp-1.8.2.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:d1185c1969ed00d0e2c57dbcd5eb09a9f82156042b21309d558f761978a58793
-size 335760
diff --git a/msmtp-1.8.2.tar.xz.sig b/msmtp-1.8.2.tar.xz.sig
deleted file mode 100644
index dc1b535..0000000
Binary files a/msmtp-1.8.2.tar.xz.sig and /dev/null differ
diff --git a/msmtp-1.8.3.tar.xz b/msmtp-1.8.3.tar.xz
new file mode 100644
index 0000000..5a71c2d
--- /dev/null
+++ b/msmtp-1.8.3.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:3cb2eefd33d048f0f82de100ef39a494e44fd1485e376ead31f733d2f36b92b4
+size 336120
diff --git a/msmtp-1.8.3.tar.xz.sig b/msmtp-1.8.3.tar.xz.sig
new file mode 100644
index 0000000..08b7b4d
Binary files /dev/null and b/msmtp-1.8.3.tar.xz.sig differ
diff --git a/msmtp.changes b/msmtp.changes
index 866b36a..2c7de39 100644
--- a/msmtp.changes
+++ b/msmtp.changes
@@ -1,3 +1,13 @@
+-------------------------------------------------------------------
+Thu Feb 14 20:48:32 UTC 2019 - Benoît Monin <benoit.monin@gmx.fr>
+
+- update to version 1.8.3 (boo#1125420)
+  * CVE-2019-8337
+    This version fixes a security problem that affects version
+    1.8.2 (older versions are not affected): when the new default
+    value system for tls_trust_file is used, the result of
+    certificate verification was not properly checked.
+
 -------------------------------------------------------------------
 Wed Feb 13 14:58:51 UTC 2019 - Tomas Cech <sleep_walker@opensuse.org>
 
diff --git a/msmtp.spec b/msmtp.spec
index 1089fc1..815b3b1 100644
--- a/msmtp.spec
+++ b/msmtp.spec
@@ -17,7 +17,7 @@
 
 
 Name:           msmtp
-Version:        1.8.2
+Version:        1.8.3
 Release:        0
 BuildRequires:  gnutls-devel
 BuildRequires:  libidn2-devel