diff --git a/pango-1.42.3.tar.xz b/pango-1.42.3.tar.xz
deleted file mode 100644
index af221af..0000000
--- a/pango-1.42.3.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:fb3d875305d5143f02cde5c72fec3903e60dc35844759dc14b2df4955b5dde3a
-size 833264
diff --git a/pango-1.42.4.tar.xz b/pango-1.42.4.tar.xz
new file mode 100644
index 0000000..b6a13fd
--- /dev/null
+++ b/pango-1.42.4.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:1d2b74cd63e8bd41961f2f8d952355aa0f9be6002b52c8aa7699d9f5da597c9d
+size 833876
diff --git a/pango.changes b/pango.changes
index 6a666bb..261f888 100644
--- a/pango.changes
+++ b/pango.changes
@@ -1,3 +1,18 @@
+-------------------------------------------------------------------
+Mon Aug 20 18:18:25 UTC 2018 - bjorn.lie@gmail.com
+
+- Update to version 1.42.4:
+  + Prevent an assertion with invalid Unicode sequences.
+  + Fix build failure in C89 mode.
+  + Fix build failure on Mac OS X 10.5 and earlier.
+- Drop pango-emoji-bsc1103877.patch: Fixed upstream.
+
+-------------------------------------------------------------------
+Sat Aug 18 00:01:23 UTC 2018 - sreeves@suse.com
+
+- Add pango-emoji-bsc1103877.patch: Fix denial of service
+  when parsing emoji (bsc#1103877, CVE-2018-15120)
+
 -------------------------------------------------------------------
 Mon Jul 30 19:40:05 UTC 2018 - bjorn.lie@gmail.com
 
diff --git a/pango.spec b/pango.spec
index 1686ed5..efc014e 100644
--- a/pango.spec
+++ b/pango.spec
@@ -17,7 +17,7 @@
 
 
 Name:           pango
-Version:        1.42.3
+Version:        1.42.4
 Release:        0
 Summary:        Library for Layout and Rendering of Text
 License:        LGPL-2.1-or-later