diff --git a/apache-commons-codec.spec b/apache-commons-codec.spec
index 0061a85..48e7348 100644
--- a/apache-commons-codec.spec
+++ b/apache-commons-codec.spec
@@ -1,7 +1,7 @@
 %bcond_with bootstrap
 
 Name:           apache-commons-codec
-Version:        1.17.1
+Version:        1.19.0
 Release:        %autorelease
 Summary:        Implementations of common encoders and decoders
 License:        Apache-2.0
diff --git a/sources b/sources
index 0831a81..a867bff 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (commons-codec-1.17.1-src.tar.gz) = c98456664396d4d9cb794c185a479e6bb4a5055ed1f526a8e358fe3a59409c057dbb16f59c251bb52976995dbca14d8f15857074c9d19fbc7bdfed625a13abf0
+SHA512 (commons-codec-1.19.0-src.tar.gz) = 65532419ea55f6d829ea46ff04806ab539a4e904950af9b780632c41011186ef1f38ebc739e3db115b2dd79266574316aa8c8e6e83c688accc8b1e8f4c2a3e83