diff --git a/squid-3.5.16.tar.xz b/squid-3.5.16.tar.xz
deleted file mode 100644
index 027964e..0000000
--- a/squid-3.5.16.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:e73d821180eed8bed230f357c680c0b19f1efa51a24725e810f2b48a2079d385
-size 2317320
diff --git a/squid-3.5.16.tar.xz.asc b/squid-3.5.16.tar.xz.asc
deleted file mode 100644
index e01f5c1..0000000
--- a/squid-3.5.16.tar.xz.asc
+++ /dev/null
@@ -1,20 +0,0 @@
-File: squid-3.5.16.tar.xz
-Date: Fri Apr  1 23:08:56 UTC 2016
-Size: 2317320
-MD5 : 557b1011a880ec3291797367e2ca4c45
-SHA1: 8268ace3de2971222e4e5b05b0d3caa6475280d4
-Key : 0xFF5CF463 <squid3@treenet.co.nz>
-      fingerprint = EA31 CC5E 9488 E516 8D2D  CC5E B268 E706 FF5C F463
-      keyring = http://www.squid-cache.org/pgp.asc
-      keyserver = subkeys.pgp.net
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1
-
-iQEcBAABAgAGBQJW/v/wAAoJELJo5wb/XPRjylQH/iVelewJqDRZWIEinCX7DrRd
-oWw7qq7ifYJOfFbXRXDMakSee6xrvUpWLy9SugBMbpEGc8YCvAkUC3tnvawH5+I4
-5gYnedyk87X7Ia4zBJs6RDJavJ+kKeY6HjKuKjxJW9R/QWqP8zIFwngQ5GqR0V6c
-mI8fDy6uoz3wFUAd0f7P7Krc4UDMf8W3nT5LEhuWlzKwz2cRxWNbUwWg8Chgc/B9
-HxwSE2Ypbw0RfH2XkgiEYGDMY45tIedFm9DBMw2UHTGUk3UCnzkI7dd8anCLjgG5
-w7v1MZ+WyTqzeidVbT4D/HQOifIsG9I43nCtCtcSZYGYboGsauNXX+sU06COipc=
-=kkEu
------END PGP SIGNATURE-----
diff --git a/squid-3.5.19.tar.xz b/squid-3.5.19.tar.xz
new file mode 100644
index 0000000..89c39bd
--- /dev/null
+++ b/squid-3.5.19.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c4b8a2efb85acc600e506605f175298ce3324048e60f4708926d354fe4b5c7a0
+size 2318720
diff --git a/squid-3.5.19.tar.xz.asc b/squid-3.5.19.tar.xz.asc
new file mode 100644
index 0000000..a71c8fe
--- /dev/null
+++ b/squid-3.5.19.tar.xz.asc
@@ -0,0 +1,20 @@
+File: squid-3.5.19.tar.xz
+Date: Sun May  8 14:25:45 UTC 2016
+Size: 2318720
+MD5 : a1d990284c429a63ee85d80ee5b3b8b9
+SHA1: 809133b751df9fb5bca07f181b3e2f7df392f761
+Key : 0xFF5CF463 <squid3@treenet.co.nz>
+      fingerprint = EA31 CC5E 9488 E516 8D2D  CC5E B268 E706 FF5C F463
+      keyring = http://www.squid-cache.org/pgp.asc
+      keyserver = subkeys.pgp.net
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1
+
+iQEcBAABAgAGBQJXL0zWAAoJELJo5wb/XPRjTFMH/A09rmkzxYmNOSCNCRDU5OAR
+GaKfWWhmg9zTz9F6KE4XQyEm2SLwjJguZXGipgEeGv3b7z6xhZt9boKvzP+F7izt
+42v6vGY63VAhmHfL6Ub2SKKzryzEjkItzuk/N5qB2bTUk4U7xlIvToLjemSMPuB0
+RsIsL9W54Szz8Bh/ixKBKUX3SSJlE7/aVyW8SPFPSSWmlK33EX/VE5Mkxsi9T/WZ
+l8FlaeQgrUP8LA+5XW86mEYl7m2YNdFJlMPDgkVwBYaeyAv7FkvGbaLnxxBm40MN
+/wD3/2rotdvbxROpCfS7jih8D8oMS/DuBFNnfVMCcKWL7/+fXmqBlqHvXBFu0xg=
+=/l9z
+-----END PGP SIGNATURE-----
diff --git a/squid-rpmlintrc b/squid-rpmlintrc
index 1b1ec08..aa69100 100644
--- a/squid-rpmlintrc
+++ b/squid-rpmlintrc
@@ -3,3 +3,4 @@ addFilter("zero-length")
 addFilter("incorrect-fsf-address")
 # Temporary solution untill it is moved into factory
 #setBadness('permissions-unauthorized-file', 333)
+#setBadness("permissions-file-setuid-bit", 333)
diff --git a/squid.changes b/squid.changes
index 20f9b92..07d6a1f 100644
--- a/squid.changes
+++ b/squid.changes
@@ -1,3 +1,44 @@
+-------------------------------------------------------------------
+Mon May  9 08:50:11 UTC 2016 - hpj@urpla.net
+
+- Update to 3.5.19
+  * Regression Bug 4515: interception proxy hangs
+- Update to 3.5.18
+  * Bug 4510: stale comment about 32KB limit on shared memory cache 
+    entries
+  * Bug 4509: EUI compile error on NetBSD
+  * Bug 4501: HTTP/1.1: normalize Host header
+  * Bug 4498: URL-unescape the login-info after extraction from URI
+  * Bug 4455: SegFault from ESIInclude::Start
+  * Prevent Squid forcing -b 2048 into the arguments for 
+    sslcrtd_program
+  * Fix TLS/SSL server handshake alert handling
+
+-------------------------------------------------------------------
+Thu May  5 10:56:34 UTC 2016 - hpj@urpla.net
+
+- Update to 3.5.17
+  * Regression Bug 4480: logformat [.width_max]
+  * Regression Bug 4481: varyEvaluateMatch: Oops. Not a Vary match 
+    on second attempt
+  * Bug 4495: Unknown SSL option SSL_OP_NO_TICKET
+  * Bug 4493: theObject->sharedMemorySize() == theSegment.size() 
+    exception
+  * Bug 4483: ./configure garbles -Og option in CFLAGS
+  * Bug 4482: Solaris GCC 5.2 warning in src/ip/Intercept.cc
+  * Bug 4468: NotNode (!acl) naming: Terminate the name before 
+    strncat(name).
+  * Bug 4465: Header forgery detection leads to crash
+  * Bug 2460 partial: workaround deferred reads on shutdown and 
+    restart
+  * cachemgr.cgi: use dynamic MemBuf for internal content 
+    generation
+  * ESI: Fix several element construction issues
+  * TLS: Fix Handshake Error: ccs received early
+  * TLS: Add chained and signing cert to peek-then-bumped 
+    connections
+  * Fix some startup/shutdown crashes
+
 -------------------------------------------------------------------
 Mon Apr  4 07:19:58 UTC 2016 - mpluskal@suse.com
 
diff --git a/squid.spec b/squid.spec
index fd33fe7..52e2a12 100644
--- a/squid.spec
+++ b/squid.spec
@@ -20,7 +20,7 @@
 %define         squidconfdir %{_sysconfdir}/squid
 
 Name:           squid
-Version:        3.5.16
+Version:        3.5.19
 Release:        0
 Summary:        A fully featured HTTP/1.0 proxy
 License:        GPL-2.0+