diff --git a/.gitignore b/.gitignore
index d46bbae..2402755 100644
--- a/.gitignore
+++ b/.gitignore
@@ -19,3 +19,4 @@ iptables-1.4.9.tar.bz2
 /iptables-1.4.14.tar.bz2
 /iptables-1.4.16.2.tar.bz2
 /iptables-1.4.18.tar.bz2
+/iptables-1.4.19.1.tar.bz2
diff --git a/iptables.spec b/iptables.spec
index b366cf4..4d10718 100644
--- a/iptables.spec
+++ b/iptables.spec
@@ -24,7 +24,7 @@
 
 Name: iptables
 Summary: Tools for managing Linux kernel packet filtering capabilities
-Version: 1.4.18
+Version: 1.4.19.1
 Release: 1%{?dist}
 Source: http://www.netfilter.org/projects/iptables/files/%{name}-%{version}.tar.bz2
 Source1: iptables.init
@@ -251,6 +251,8 @@ fi
 %doc COPYING INSTALL INCOMPATIBILITIES
 %config(noreplace) %attr(0600,root,root) /etc/sysconfig/iptables-config
 %config(noreplace) %attr(0600,root,root) /etc/sysconfig/ip6tables-config
+%dir %{_sysconfdir}/xtables/
+%config(noreplace) %{_sysconfdir}/xtables/connlabel.conf
 %{_sbindir}/iptables*
 %{_sbindir}/ip6tables*
 %{_sbindir}/xtables-multi
@@ -301,6 +303,31 @@ fi
 
 
 %changelog
+* Wed Jul 31 2013 Thomas Woerner <twoerner@redhat.com> 1.4.19.1-1
+- new version 1.4.19.1
+  - libxt_NFQUEUE: fix bypass option documentation
+  - extensions: add connlabel match
+  - extensions: add connlabel match
+  - ip[6]tables: show --protocol instead of --proto in usage
+  - libxt_recent: Fix missing space in manpage for --mask option
+  - extensions: libxt_multiport: Update manpage to list valid protocols
+  - utils: nfnl_osf: use the right nfnetlink lib
+  - libip6t_NETMAP: Use xtables_ip6mask_to_cidr and get rid of libip6tc dependency
+  - Revert "build: resolve link failure for ip6t_NETMAP"
+  - libxt_osf: fix missing --ttl and --log in save output
+  - libxt_osf: fix bad location for location in --genre
+  - libip6t_SNPT: add manpage
+  - libip6t_DNPT: add manpage
+  - utils: updates .gitignore to include nfbpf_compile
+  - extensions: libxt_bpf: clarify --bytecode argument
+  - libxtables: fix parsing of dotted network mask format
+  - build: bump version to 1.4.19
+  - libxt_conntrack: fix state match alias state parsing
+  - extensions: add libxt_bpf extension
+  - utils: nfbpf_compile
+  - doc: mention SNAT in INPUT chain since kernel 2.6.36
+- fixed changelog date weekdays where needed
+
 * Mon Mar  4 2013 Thomas Woerner <twoerner@redhat.com> 1.4.18-1
 - new version 1.4.18 
   - lots of documentation changes
@@ -860,7 +887,7 @@ fi
 - iptc is not a public interface and therefore not installed anymore
 - dropped upstream secmark patch
 
-* Thu Sep 19 2006 Thomas Woerner <twoerner@redhat.com> 1.3.5-2
+* Tue Sep 19 2006 Thomas Woerner <twoerner@redhat.com> 1.3.5-2
 - added secmark iptables patches (#201573)
 
 * Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 1.3.5-1.2.1
@@ -1146,7 +1173,7 @@ fi
 - don't obsolete ipchains either
 - update to 1.1.0
 
-* Mon Jun  4 2000 Bill Nottingham <notting@redhat.com>
+* Sun Jun  4 2000 Bill Nottingham <notting@redhat.com>
 - remove explicit kernel requirement
 
 * Tue May  2 2000 Bernhard Rosenkränzer <bero@redhat.com>
diff --git a/sources b/sources
index ef4b0e6..b3b2970 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-a819199d5ec013b82da13a8ffbba857e  iptables-1.4.18.tar.bz2
+be97ce9007fa42c867901b496c935a0a  iptables-1.4.19.1.tar.bz2