diff --git a/asterisk.spec b/asterisk.spec
index cd1ed4e..990eba5 100644
--- a/asterisk.spec
+++ b/asterisk.spec
@@ -40,8 +40,8 @@
 
 Summary:          The Open Source PBX
 Name:             asterisk
-Version:          16.4.0
-Release:          2%{?dist}
+Version:          16.4.1
+Release:          1%{?dist}
 License:          GPLv2
 URL:              http://www.asterisk.org/
 
@@ -1546,6 +1546,10 @@ fi
 %endif
 
 %changelog
+* Mon Jul 15 2019 Jared K. Smith <jsmith@fedoraproject.org> - 16.4.1-1
+- Update to upstream 16.4.1 release for security updates AST-2019-002 and
+  AST-2019-003 related to remote crash vulnerabilities
+
 * Sat Jun 01 2019 Jitka Plesnikova <jplesnik@redhat.com> - 16.4.0-2
 - Perl 5.30 rebuild
 
diff --git a/sources b/sources
index 122361b..06c83b7 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (asterisk-16.4.0.tar.gz) = 3e8dbf8c71dd2c09274212fc2ee11977d2d5c54d57bb701379c9557cfed3e4a596f14ba9c29b4c229b7e5bd24a05c8c9df6bb856a970dcf06cd823993261e296
-SHA512 (asterisk-16.4.0.tar.gz.asc) = 54d1982e9b6b216eb2f2202956af7270373724175fedc81f4493fbfdc0b56f7ca03076e11aa641efc241ab3d1d9d929fccc2883afbe449baafcad3630fb0626b
+SHA512 (asterisk-16.4.1.tar.gz) = 4eca66fed184ced5be7140b5de2eade3e2f9ed90f7f6a5a43c2dc26d8458ec46607075cd06ecb50ff4f9a06b654daa602be84db93f6749283ed02bcb9a7b4862
+SHA512 (asterisk-16.4.1.tar.gz.asc) = f756b2fb559f2c4c1bcfae88761f42dd9a3a7617ff870b4e8056d3170ee8350f25c3286dd8262367a60b237f0e7d5fe0cb9975ed9d1bed605cc03195954d9c14
 SHA512 (pjproject-2.8.tar.bz2) = 0a0ee66932959710f806cb1d88a3b946b214d2caecd54ecc9eabdbdb17f7f4fa0b7d27567dc3796d845a25b850c974536e7c7538d51f93771d13dd2fd309eaf5