diff --git a/python-slixmpp.changes b/python-slixmpp.changes
index 7b74f33..c8d523e 100644
--- a/python-slixmpp.changes
+++ b/python-slixmpp.changes
@@ -1,3 +1,13 @@
+-------------------------------------------------------------------
+Tue Feb  5 14:11:03 UTC 2019 - mvetter@suse.com
+
+- Update to 1.4.2:
+  * Do not do channel binding without TLS
+  * Add default timeout of 120s for IQs (prevent slowdowns)
+  * Fix CVE-2019-1000021 (bsc#1124322)
+  * Do not query vcard avatars unconditionnally
+  * Fix GSSAPI (Jelmer Vernooij)
+
 -------------------------------------------------------------------
 Fri Jan 11 13:59:04 UTC 2019 - mvetter@suse.com
 
diff --git a/python-slixmpp.spec b/python-slixmpp.spec
index e5f9d87..a0b7ba5 100644
--- a/python-slixmpp.spec
+++ b/python-slixmpp.spec
@@ -20,13 +20,13 @@
 %define _name   slixmpp
 %define _tar_ver 127
 Name:           python-slixmpp
-Version:        1.4.1
+Version:        1.4.2
 Release:        0
 Summary:        Python XMPP (Jabber) Library that Implements Everything as a Plugin
 License:        MIT
 Group:          Development/Languages/Python
 URL:            https://slixmpp.readthedocs.io/
-Source:         https://lab.louiz.org/poezio/slixmpp/-/archive/slix-1.4.1/slixmpp-slix-%{version}.tar.gz 
+Source:         https://lab.louiz.org/poezio/slixmpp/-/archive/slix-%{version}/slixmpp-slix-%{version}.tar.gz 
 # PATCH-FIX-OPENSUSE slixmpp-fix-legacyauth.patch nyov@nexnode.net -- Fix an error in legacyauth support.
 Patch0:         %{_name}-fix-legacyauth.patch
 BuildRequires:  %{python_module Cython}
diff --git a/slixmpp-slix-1.4.1.tar.gz b/slixmpp-slix-1.4.1.tar.gz
deleted file mode 100644
index edb0ad1..0000000
--- a/slixmpp-slix-1.4.1.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:89c461e528c295df3a8a7c8c263b02137a6e97ab3889c8005fa16dce951a5f54
-size 1009760
diff --git a/slixmpp-slix-1.4.2.tar.gz b/slixmpp-slix-1.4.2.tar.gz
new file mode 100644
index 0000000..0fbc205
--- /dev/null
+++ b/slixmpp-slix-1.4.2.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4e6f799c1351103da9fda7f07f284cd857342e1e21e31ca53c2d1cce2b57f835
+size 1010259