diff --git a/git-2.19.0.tar.sign b/git-2.19.0.tar.sign
deleted file mode 100644
index c6cbdf5..0000000
Binary files a/git-2.19.0.tar.sign and /dev/null differ
diff --git a/git-2.19.0.tar.xz b/git-2.19.0.tar.xz
deleted file mode 100644
index 690e225..0000000
--- a/git-2.19.0.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:180feff58fc0d965d23ea010aa2c69ead92ec318eb9b09cf737529aec62f3ef4
-size 5227124
diff --git a/git-2.19.1.tar.sign b/git-2.19.1.tar.sign
new file mode 100644
index 0000000..b594703
Binary files /dev/null and b/git-2.19.1.tar.sign differ
diff --git a/git-2.19.1.tar.xz b/git-2.19.1.tar.xz
new file mode 100644
index 0000000..e5cf231
--- /dev/null
+++ b/git-2.19.1.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:345056aa9b8084280b1b9fe1374d232dec05a34e8849028a20bfdb56e920dbb5
+size 5227908
diff --git a/git.changes b/git.changes
index 5a57c32..c82a432 100644
--- a/git.changes
+++ b/git.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Fri Oct  5 17:31:07 UTC 2018 - astieger@suse.com
+
+- git 2.19.1:
+  * CVE-2018-17456: Specially crafted .gitmodules files may have
+    allowed arbitrary code execution when the repository is cloned
+    with --recurse-submodules (bsc#1110949)
+
 -------------------------------------------------------------------
 Tue Sep 11 14:40:01 UTC 2018 - Petr Vorel <pvorel@suse.cz>
 
diff --git a/git.spec b/git.spec
index c17ac33..fabd839 100644
--- a/git.spec
+++ b/git.spec
@@ -35,7 +35,7 @@
 %bcond_without docs
 
 Name:           git
-Version:        2.19.0
+Version:        2.19.1
 Release:        0
 Summary:        Fast, scalable, distributed revision control system
 License:        GPL-2.0-only