diff --git a/gnupg-2.1.18.tar.bz2 b/gnupg-2.1.18.tar.bz2
deleted file mode 100644
index d5290d1..0000000
--- a/gnupg-2.1.18.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:d04c6fab7e5562ce4b915b22020e34d4c1a256847690cf149842264fc7cef994
-size 6308666
diff --git a/gnupg-2.1.18.tar.bz2.sig b/gnupg-2.1.18.tar.bz2.sig
deleted file mode 100644
index 5f8c8c6..0000000
Binary files a/gnupg-2.1.18.tar.bz2.sig and /dev/null differ
diff --git a/gnupg-2.1.19.tar.bz2 b/gnupg-2.1.19.tar.bz2
new file mode 100644
index 0000000..364d489
--- /dev/null
+++ b/gnupg-2.1.19.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:46cced1f5641ce29cc28250f52fadf6e417e649b3bfdec49a5a0d0b22a639bf0
+size 6404836
diff --git a/gnupg-2.1.19.tar.bz2.sig b/gnupg-2.1.19.tar.bz2.sig
new file mode 100644
index 0000000..af025e2
Binary files /dev/null and b/gnupg-2.1.19.tar.bz2.sig differ
diff --git a/gpg2.changes b/gpg2.changes
index 54eb5bb..0e1f74b 100644
--- a/gpg2.changes
+++ b/gpg2.changes
@@ -1,3 +1,36 @@
+-------------------------------------------------------------------
+Tue Mar  7 12:55:14 UTC 2017 - astieger@suse.com
+
+- GnuPG 2.1.19:
+  * gpg: Print a warning if Tor mode is requested but the Tor
+    daemon is not running.
+  * gpg: New status code DECRYPTION_KEY to print the actual private
+    key used for decryption.
+  * gpgv: New options --log-file and --debug.
+  * gpg-agent: Revamp the prompts to ask for card PINs.
+  * scd: Support for multiple card readers.
+  * scd: Removed option --debug-disable-ticker. Ticker is used
+    only when it is required to watch removal of device/card.
+  * scd: Improved detection of card inserting and removal.
+  * dirmngr: New option --disable-ipv4.
+  * dirmngr: New option --no-use-tor to explicitly disable the use
+    of Tor.
+  * dirmngr: The option --allow-version-check is now required even
+    if the option --use-tor is also used.
+  * dirmngr: Handle a missing nsswitch.conf gracefully.
+  * dirmngr: Avoid PTR lookups for keyserver pools. The are only
+    done for the debug command "keyserver --hosttable".
+  * dirmngr: Rework the internal certificate cache to support
+    classes of certificates. Load system provided certificates on
+    startup.
+  * Add options --tls, --no-crl, and --systrust to the "VALIDATE"
+    command.
+  * dirmngr: Add support for the ntbtls library.
+  * wks: Create mails with a "WKS-Phase" header. Fix detection of
+    Draft-2 mode.
+  * Many other bug fixes and new regression tests.
+- dirmngr: use system certificate store
+
 -------------------------------------------------------------------
 Thu Mar  2 10:12:09 UTC 2017 - jengelh@inai.de
 
diff --git a/gpg2.spec b/gpg2.spec
index 245f7f5..08a32ac 100644
--- a/gpg2.spec
+++ b/gpg2.spec
@@ -17,7 +17,7 @@
 
 
 Name:           gpg2
-Version:        2.1.18
+Version:        2.1.19
 Release:        0
 Summary:        File encryption, decryption, signature creation and verification utility
 License:        GPL-3.0+
@@ -104,7 +104,8 @@ date=$(date -u +%%Y-%%m-%%dT%%H:%%M+0000 -r %{SOURCE99})
     --enable-large-secmem \
     --enable-wks-tools \
     --with-gnu-ld \
-    --enable-build-timestamp=$date
+    --with-default-trust-store=/etc/ssl/ca-bundle.pem \
+    --enable-build-timestamp=$date \
 
 make %{?_smp_mflags}