diff --git a/.gitignore b/.gitignore
index 241cf0f..beaa20b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -17,3 +17,4 @@
 /mbedtls-2.12.0-apache.tgz
 /mbedtls-2.13.0-apache.tgz
 /mbedtls-2.14.0-apache.tgz
+/mbedtls-2.14.1-apache.tgz
diff --git a/mbedtls.spec b/mbedtls.spec
index 94518f8..3f69e58 100644
--- a/mbedtls.spec
+++ b/mbedtls.spec
@@ -3,7 +3,7 @@
 %endif
 
 Name: mbedtls
-Version: 2.14.0
+Version: 2.14.1
 Release: 1%{?dist}
 Summary: Light-weight cryptographic and SSL/TLS library
 Group: System Environment/Libraries
@@ -129,6 +129,10 @@ LD_LIBRARY_PATH=$PWD/library ctest --output-on-failure -V
 %doc apidoc/*
 
 %changelog
+* Fri Dec 07 2018 Morten Stevens <mstevens@fedoraproject.org> - 2.14.1-1
+- Update to 2.14.1
+- CVE-2018-19608 (#1656784)
+
 * Mon Dec 03 2018 Morten Stevens <mstevens@fedoraproject.org> - 2.14.0-1
 - Update to 2.14.0
 
diff --git a/sources b/sources
index 4fb283c..f7a86d6 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (mbedtls-2.14.0-apache.tgz) = 081af6cfb22db1a7977fac8ae1e56030f0268e8f83419d3d032cae9f9cf8d11947050eb64aee841dc7a93880c03d535935e06054da4d30815f1e6288e32fc252
+SHA512 (mbedtls-2.14.1-apache.tgz) = f8a9371fcdca34f61db3676f14f83ba303194dc097fcf34b8088b2d2b1b88b2818c2ed54eef747d8dff7c799e11aee511eb179bb815ae46934b3426d09926dda