diff --git a/.gitignore b/.gitignore
index 1d5c68d..8a9b342 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,3 @@
 /19f2f28178aa88772f69c4eeb3793d4a63c244b0.tar.gz
 /9ebe139e77e82afb122e335328007bca86905ae4.tar.gz
+/a62711a5da7a2dc2eb93eac47e103738ad923fd6.tar.gz
diff --git a/containernetworking-plugins.spec b/containernetworking-plugins.spec
index 8a93c88..01a4f0e 100644
--- a/containernetworking-plugins.spec
+++ b/containernetworking-plugins.spec
@@ -18,12 +18,12 @@
 %global provider_prefix %{provider}.%{provider_tld}/%{project}/%{repo}
 %global import_path %{provider_prefix}
 %global git0 https://%{import_path}
-%global commit0 9ebe139e77e82afb122e335328007bca86905ae4
+%global commit0 a62711a5da7a2dc2eb93eac47e103738ad923fd6
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 Name: %{project}-%{repo}
-Version: 0.7.4
-Release: 2%{?dist}
+Version: 0.7.5
+Release: 1%{?dist}
 Summary: Libraries for writing CNI plugin
 License: ASL 2.0
 URL: %{git0}
@@ -267,6 +267,10 @@ export GOPATH=%{buildroot}/%{gopath}:$(pwd)/vendor:%{gopath}
 %endif
 
 %changelog
+* Fri May 31 2019 Lokesh Mandvekar <lsm5@fedoraproject.org> - 0.7.5-1
+- Resolves: #1715758 - CVE-2019-9946
+- bump to v0.7.5
+
 * Wed Feb 27 2019 Jason Brooks <jbrooks@redhat.com> - 0.7.4-2
 - add Provides kubernetes-cni for compatibility with upstream kubelet package
 
diff --git a/sources b/sources
index 80440e9..2fc0930 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (9ebe139e77e82afb122e335328007bca86905ae4.tar.gz) = 4b64dc816f4d6225dfee72caee96749a406b969869ec817fcdfa5a98bb1f944072855621267fbd2770dc2d28dbbfb915450a2ca5c9e56242040a81c5616e1fda
+SHA512 (a62711a5da7a2dc2eb93eac47e103738ad923fd6.tar.gz) = 10e78ed8513b89aa137f42cc9c521f7aa6608f5eb1341ec45c11cdd0a22dd08c25cb0a7e60734c18eec39e24c5f89708bfd1f43bfffc9a96f45a64a8115a14df