diff --git a/python-urllib3.changes b/python-urllib3.changes
index f7d6844..e3faa94 100644
--- a/python-urllib3.changes
+++ b/python-urllib3.changes
@@ -1,3 +1,34 @@
+-------------------------------------------------------------------
+Thu Apr 18 00:02:07 CEST 2019 - Matej Cepl <mcepl@suse.com>
+
+- Update to 1.24.2:
+  - Implemented a more efficient HTTPResponse.__iter__() method.
+    (Issue #1483)
+  - Upgraded urllib3.utils.parse_url() to be RFC 3986 compliant.
+    (Pull #1487)
+  - Remove Authorization header regardless of case when
+    redirecting to cross-site. (Issue #1510)
+  - Added support for key_password for HTTPSConnectionPool to use
+    encrypted key_file without creating your own SSLContext
+    object. (Pull #1489)
+  - Fixed issue where OpenSSL would block if an encrypted client
+    private key was given and no password was given. Instead an
+    SSLError is raised. (Pull #1489)
+  - Require and validate certificates by default when using HTTPS
+    (Pull #1507)
+  - Added support for Brotli content encoding. It is enabled
+    automatically if brotlipy package is installed which can be
+    requested with urllib3[brotli] extra. (Pull #1532)
+  - Add TLSv1.3 support to CPython, pyOpenSSL, and
+    SecureTransport SSLContext implementations. (Pull #1496)
+  - Drop ciphers using DSS key exchange from default TLS cipher
+    suites. Improve default ciphers when using SecureTransport.
+    (Pull #1496)
+  - Add support for IPv6 addresses in subjectAltName section of
+    certificates. (Issue #1269)
+  - Switched the default multipart header encoder from RFC 2231
+    to HTML 5 working draft. (Issue #303, PR #1492)
+
 -------------------------------------------------------------------
 Sun Dec 30 18:20:59 CET 2018 - mcepl@suse.com
 
diff --git a/python-urllib3.spec b/python-urllib3.spec
index 6e13ccf..b15aec4 100644
--- a/python-urllib3.spec
+++ b/python-urllib3.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package python-urllib3
 #
-# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -31,7 +31,7 @@ Name:           python-urllib3-%{flavor}
 %else
 Name:           python-urllib3
 %endif
-Version:        1.24.1
+Version:        1.24.2
 Release:        0
 Summary:        HTTP library with thread-safe connection pooling, file post, and more
 License:        MIT
diff --git a/urllib3-1.24.1.tar.gz b/urllib3-1.24.1.tar.gz
deleted file mode 100644
index 2d2ac41..0000000
--- a/urllib3-1.24.1.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:de9529817c93f27c8ccbfead6985011db27bd0ddfcdb2d86f3f663385c6a9c22
-size 229688
diff --git a/urllib3-1.24.2.tar.gz b/urllib3-1.24.2.tar.gz
new file mode 100644
index 0000000..9f20240
--- /dev/null
+++ b/urllib3-1.24.2.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:9a247273df709c4fedb38c711e44292304f73f39ab01beda9f6b9fc375669ac3
+size 230699
diff --git a/urllib3-ssl-default-context.patch b/urllib3-ssl-default-context.patch
index 2605c80..7e399ec 100644
--- a/urllib3-ssl-default-context.patch
+++ b/urllib3-ssl-default-context.patch
@@ -1,7 +1,7 @@
 --- a/src/urllib3/util/ssl_.py
 +++ b/src/urllib3/util/ssl_.py
-@@ -330,6 +330,8 @@ def ssl_wrap_socket(sock, keyfile=None,
-     elif getattr(context, 'load_default_certs', None) is not None:
+@@ -333,6 +333,8 @@ def ssl_wrap_socket(sock, keyfile=None,
+     elif ssl_context is None and hasattr(context, 'load_default_certs'):
          # try to load OS default certs; works well on Windows (require Python3.4+)
          context.load_default_certs()
 +    elif cert_reqs != ssl.CERT_NONE and hasattr(context, 'set_default_verify_paths'):