diff --git a/.bind.metadata b/.bind.metadata
index 2f19d9b..8da89f4 100644
--- a/.bind.metadata
+++ b/.bind.metadata
@@ -1,2 +1,2 @@
-2e7acd6e00a181bf568c0261216ae0ae7d2f2a8a SOURCES/bind-9.11.18.tar.gz
+f62726f2379eb1f2921c64c20f6668ce3db190c2 SOURCES/bind-9.11.19.tar.gz
 a164fcad1d64d6b5fab5034928cb7260f1fa8fdd SOURCES/random.data
diff --git a/.gitignore b/.gitignore
index ba10985..6a6db0d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,2 @@
-SOURCES/bind-9.11.18.tar.gz
+SOURCES/bind-9.11.19.tar.gz
 SOURCES/random.data
diff --git a/SPECS/bind.spec b/SPECS/bind.spec
index bd599ab..47a1a06 100644
--- a/SPECS/bind.spec
+++ b/SPECS/bind.spec
@@ -64,7 +64,7 @@
 Summary:  The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
 Name:     bind
 License:  MPLv2.0
-Version:  9.11.18
+Version:  9.11.19
 Release:  1%{?PATCHVER:.%{PATCHVER}}%{?PREVER:.%{PREVER}}%{?dist}
 Epoch:    32
 Url:      http://www.isc.org/products/BIND/
@@ -1512,6 +1512,9 @@ rm -rf ${RPM_BUILD_ROOT}
 
 
 %changelog
+* Fri May 15 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.19-1
+- Update to 9.11.19 (CVE-2020-8616, CVE-2020-8617)
+
 * Thu Apr 16 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.18-1
 - Update to 9.11.18