diff --git a/_constraints b/_constraints
new file mode 100644
index 0000000..fb5db1f
--- /dev/null
+++ b/_constraints
@@ -0,0 +1,8 @@
+<constraints>
+  <hardware>
+    <disk>
+      <!-- for fileRoundTripTest: ./datagen -g4193M -->
+      <size unit="G">6</size>
+    </disk>
+  </hardware>
+</constraints>
diff --git a/zstd-1.4.1.tar.gz b/zstd-1.4.1.tar.gz
deleted file mode 100644
index e6666ad..0000000
--- a/zstd-1.4.1.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:535020867eb3af61fbadfcb402335af7f52dfe44f081ccfa201e961f01751aa0
-size 1895842
diff --git a/zstd-1.4.2.tar.gz b/zstd-1.4.2.tar.gz
new file mode 100644
index 0000000..1fa5a80
--- /dev/null
+++ b/zstd-1.4.2.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:12730983b521f9a604c6789140fcb94fadf9a3ca99199765e33c56eb65b643c9
+size 1896786
diff --git a/zstd.changes b/zstd.changes
index 3c37042..b34f27c 100644
--- a/zstd.changes
+++ b/zstd.changes
@@ -1,3 +1,18 @@
+-------------------------------------------------------------------
+Tue Jul 30 13:43:02 UTC 2019 - Bernhard Wiedemann <bwiedemann@suse.com>
+
+- Add disk _constraints to fix ppc64le build
+
+-------------------------------------------------------------------
+Fri Jul 26 13:06:18 UTC 2019 - Bernhard Wiedemann <bwiedemann@suse.com>
+
+- Update to version 1.4.2:
+  * bug: Fix bug in zstd-0.5 decoder by @terrelln (#1696)
+  * bug: Fix seekable decompression in-memory API by @iburinoc (#1695)
+  * bug: Close minor memory leak in CLI by @LeeYoung624 (#1701)
+  * misc: Validate blocks are smaller than size limit by @vivekmig (#1685)
+  * misc: Restructure source files by @ephiepark (#1679)
+
 -------------------------------------------------------------------
 Mon Jul 22 10:58:28 UTC 2019 - Martin Pluskal <mpluskal@suse.com>
 
@@ -80,6 +95,8 @@ Sat Jan  5 13:57:58 UTC 2019 - astieger@suse.com
   * support ZSTD_CLEVEL environment variable
   * --no-progress flag, preserving final summary
   * various CLI fixes
+  * fix race condition in one-pass compression functions that could
+    allow out of bounds write (CVE-2019-11922, boo#1142941)
 
 -------------------------------------------------------------------
 Wed Oct 24 08:29:38 UTC 2018 - astieger@suse.com
diff --git a/zstd.spec b/zstd.spec
index 7d65f51..1e8c280 100644
--- a/zstd.spec
+++ b/zstd.spec
@@ -19,7 +19,7 @@
 %define major 1
 %define libname lib%{name}%{major}
 Name:           zstd
-Version:        %{major}.4.1
+Version:        %{major}.4.2
 Release:        0
 Summary:        Zstandard compression tools
 License:        BSD-3-Clause AND GPL-2.0-only