diff --git a/git-2.39.1.tar.sign b/git-2.39.1.tar.sign
deleted file mode 100644
index d69a968..0000000
Binary files a/git-2.39.1.tar.sign and /dev/null differ
diff --git a/git-2.39.1.tar.xz b/git-2.39.1.tar.xz
deleted file mode 100644
index 5a33d71..0000000
--- a/git-2.39.1.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:40a38a0847b30c371b35873b3afcf123885dd41ea3ecbbf510efa97f3ce5c161
-size 7160744
diff --git a/git-2.39.2.tar.sign b/git-2.39.2.tar.sign
new file mode 100644
index 0000000..1767fa7
Binary files /dev/null and b/git-2.39.2.tar.sign differ
diff --git a/git-2.39.2.tar.xz b/git-2.39.2.tar.xz
new file mode 100644
index 0000000..2fb1a79
--- /dev/null
+++ b/git-2.39.2.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:475f75f1373b2cd4e438706185175966d5c11f68c4db1e48c26257c43ddcf2d6
+size 7163224
diff --git a/git.changes b/git.changes
index 288ea91..b0d6ce2 100644
--- a/git.changes
+++ b/git.changes
@@ -1,3 +1,13 @@
+-------------------------------------------------------------------
+Tue Feb 14 20:06:06 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- git 2.39.2:
+  * CVE-2023-22490: Using a specially-crafted repository, Git can
+    be tricked into using its local clone optimization even when
+    using a non-local transport boo#1208027
+  * CVE-2023-23946: a path outside the working tree can be
+    overwritten as the user who is running "git apply" boo#1208028
+
 -------------------------------------------------------------------
 Tue Jan 17 19:13:03 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
 
diff --git a/git.spec b/git.spec
index 5aa25b2..45e1d13 100644
--- a/git.spec
+++ b/git.spec
@@ -36,7 +36,7 @@
 %bcond_with    asciidoctor
 %endif
 Name:           git
-Version:        2.39.1
+Version:        2.39.2
 Release:        0
 Summary:        Fast, scalable, distributed revision control system
 License:        GPL-2.0-only