diff --git a/.cvsignore b/.cvsignore
index 4dac75e..3c41074 100644
--- a/.cvsignore
+++ b/.cvsignore
@@ -1,3 +1,2 @@
-asterisk-developer-pubring.gpg
-asterisk-1.6.1.7-rc2.tar.gz
-asterisk-1.6.1.7-rc2.tar.gz.asc
+asterisk-1.6.1.9.tar.gz
+asterisk-1.6.1.9.tar.gz.asc
diff --git a/asterisk.spec b/asterisk.spec
index 62e732f..0f2413e 100644
--- a/asterisk.spec
+++ b/asterisk.spec
@@ -1,7 +1,7 @@
 #define _rc 2
 Summary: The Open Source PBX
 Name: asterisk
-Version: 1.6.1.8
+Version: 1.6.1.9
 Release: 1%{?_rc:.rc%{_rc}}%{?dist}
 License: GPLv2
 Group: Applications/Internet
@@ -69,7 +69,7 @@ Requires: latex2html
 # asterisk-conference package removed since patch no longer compiles
 Obsoletes: asterisk-conference <= 1.6.0-0.14.beta9
 Obsoletes: asterisk-mobile <= 1.6.1-0.23.rc1
-Obsoletes: asterisk-firmware <= 1.6.1.6-1
+Obsoletes: asterisk-firmware < 1.6.1.9-1
 
 %description
 Asterisk is a complete PBX in software. It runs on Linux and provides
@@ -993,6 +993,10 @@ fi
 %{_libdir}/asterisk/modules/app_voicemail_plain.so
 
 %changelog
+* Wed Nov  4 2009 Jeffrey C. Ollie <jeff@ocjtech.us> - 1.6.1.9-1
+- Update to 1.6.1.9 to fix AST-2009-009/CVE-2008-7220 and AST-2009-008
+- Fix obsoletes for firmware subpackage
+
 * Tue Oct 27 2009 Jeffrey C. Ollie <jeff@ocjtech.us> - 1.6.1.8-1
 - Update to 1.6.1.8 to fix bug 531199:
 -
diff --git a/sources b/sources
index 597904f..2532b13 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-98ed805d9c0579942b26e056506a62c0  asterisk-1.6.1.8.tar.gz
-f1ef4d98dadea6ee91f153f9180fea0a  asterisk-1.6.1.8.tar.gz.asc
+e40cc69fb53e1cad9f30d1d533383efd  asterisk-1.6.1.9.tar.gz
+fba8322f5b26f2530b3fef92a6ce7be1  asterisk-1.6.1.9.tar.gz.asc