diff --git a/.gitignore b/.gitignore
index 59854df..3acc59c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,5 +1,5 @@
 SOURCES/kernel-abi-whitelists-1127.tar.bz2
 SOURCES/kernel-kabi-dw-1127.tar.bz2
-SOURCES/linux-3.10.0-1127.18.2.el7.tar.xz
+SOURCES/linux-3.10.0-1127.19.1.el7.tar.xz
 SOURCES/rheldup3.x509
 SOURCES/rhelkpatch1.x509
diff --git a/.kernel.metadata b/.kernel.metadata
index 35929df..097cb22 100644
--- a/.kernel.metadata
+++ b/.kernel.metadata
@@ -1,5 +1,5 @@
 4fc704567fc0b9abd6217e466773bbd48b255613 SOURCES/kernel-abi-whitelists-1127.tar.bz2
 7a3638864a005624c5a949922fbf8cfa389b094f SOURCES/kernel-kabi-dw-1127.tar.bz2
-c401480f4639465a865e0a9355c4576788072fac SOURCES/linux-3.10.0-1127.18.2.el7.tar.xz
+53f546c77c118d7cb6055fb430d5643b85cb0088 SOURCES/linux-3.10.0-1127.19.1.el7.tar.xz
 95b9b811c7b0a6c98b2eafc4e7d6d24f2cb63289 SOURCES/rheldup3.x509
 d90885108d225a234a5a9d054fc80893a5bd54d0 SOURCES/rhelkpatch1.x509
diff --git a/README.debrand b/README.debrand
deleted file mode 100644
index 01c46d2..0000000
--- a/README.debrand
+++ /dev/null
@@ -1,2 +0,0 @@
-Warning: This package was configured for automatic debranding, but the changes
-failed to apply.
diff --git a/SOURCES/Makefile.common b/SOURCES/Makefile.common
index b8e3a4e..1a6e1f4 100644
--- a/SOURCES/Makefile.common
+++ b/SOURCES/Makefile.common
@@ -9,7 +9,7 @@ RPMVERSION:=3.10.0
 # marker is git tag which we base off of for exporting patches
 MARKER:=v3.10
 PREBUILD:=
-BUILD:=1127.18.2
+BUILD:=1127.19.1
 DIST:=.el7
 SPECFILE:=kernel.spec
 RPM:=$(REDHAT)/rpm
diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec
index 97d98bd..476490d 100644
--- a/SPECS/kernel.spec
+++ b/SPECS/kernel.spec
@@ -14,10 +14,10 @@ Summary: The Linux kernel
 %global distro_build 1127
 
 %define rpmversion 3.10.0
-%define pkgrelease 1127.18.2.el7
+%define pkgrelease 1127.19.1.el7
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 1127.18.2%{?dist}
+%define specrelease 1127.19.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -1782,9 +1782,12 @@ fi
 %kernel_variant_files %{with_kdump} kdump
 
 %changelog
-* Mon Jul 20 2020 Augusto Caringi <acaringi@redhat.com> [3.10.0-1127.18.2.el7]
-- [crypto] pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1837429 1837430] {CVE-2020-10713}
-- [kernel] Move to dual-signing to split signing keys up better (pjones) [1837429 1837430] {CVE-2020-10713}
+* Tue Aug 11 2020 Augusto Caringi <acaringi@redhat.com> [3.10.0-1127.19.1.el7]
+- [mm] memcg: fix NULL pointer dereference in __mem_cgroup_usage_unregister_event (Waiman Long) [1867441 1842715]
+- [mm] memcg: only free spare array when readers are done (Waiman Long) [1867441 1842715]
+- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1866971 1862840]
+- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1866971 1862840]
+- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1866971 1862840]
 
 * Mon Jul 13 2020 Augusto Caringi <acaringi@redhat.com> [3.10.0-1127.18.1.el7]
 - [fs] locks: allow filesystems to request that ->setlease be called without i_lock (Jeff Layton) [1838602 1830606]