diff --git a/.gitignore b/.gitignore
index 62da1e5..20084f8 100644
--- a/.gitignore
+++ b/.gitignore
@@ -10,3 +10,4 @@
 /notebook-5.4.0.tar.gz
 /notebook-5.5.0.tar.gz
 /notebook-5.6.0.tar.gz
+/notebook-5.7.2.tar.gz
diff --git a/python-notebook.spec b/python-notebook.spec
index ceb5ca1..51853d6 100644
--- a/python-notebook.spec
+++ b/python-notebook.spec
@@ -4,7 +4,7 @@ Name:           python-%{pypi_name}
 %global _docdir_fmt %{name}
 
 # Updating this package? Update the list of bundled things bellow (twice)
-Version:        5.6.0
+Version:        5.7.2
 
 # a tag like rc1, set to %%{nil} if stable
 %global tag %{nil}
@@ -12,7 +12,7 @@ Version:        5.6.0
 # upstream version, like 1.2.3rc1
 %global uversion %{version}%{tag}
 
-Release:        3%{tag}%{?dist}
+Release:        1%{tag}%{?dist}
 Summary:        A web-based notebook environment for interactive computing
 License:        BSD
 URL:            http://jupyter.org
@@ -92,17 +92,17 @@ Requires:       js-underscore >= 1.8.3
 # Versions from bower.json
 Provides:       bundled(bootstrap) = 3.3
 Provides:       bundled(bootstrap-tour) = 0.9.0
-Provides:       bundled(codemirror) = 5.27
+Provides:       bundled(codemirror) = 5.37
 Provides:       bundled(es6-promise) = 1.0
 Provides:       bundled(google-caja) = 5669
 Provides:       bundled(jed) = 1.1.1
 Provides:       bundled(jquery) = 3.3
 Provides:       bundled(jquery-typeahead) = 2.0.0
-Provides:       bundled(jquery-ui) = 1.10
+Provides:       bundled(jquery-ui) = 1.12
 Provides:       bundled(preact) = 7.2.0
 Provides:       bundled(preact-compat) = 3.14.3
 Provides:       bundled(proptypes) = 0.14.4
-Provides:       bundled(requirejs) = 2.1
+Provides:       bundled(requirejs) = 2.2
 Provides:       bundled(requirejs-text) = 2.0.15
 Provides:       bundled(requirejs-plugins) = 1.0.3
 Provides:       bundled(text-encoding) = 0.1
@@ -181,6 +181,9 @@ LANG=C.utf-8 nosetests-3 -v --exclude-dir notebook/tests/selenium
 
 
 %changelog
+* Wed Nov 21 2018 Miro Hrončok <mhroncok@redhat.com> - 5.7.2-1
+- Update to 5.7.2, fix CVE-2018-19351, CVE-2018-19352 (#1651976)
+
 * Wed Nov 07 2018 Miro Hrončok <mhroncok@redhat.com> - 5.6.0-3
 - Drop the python2 leaf subpackage again (#1647377)
 
diff --git a/sources b/sources
index 80a7728..6740842 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (notebook-5.6.0.tar.gz) = 05200e94cd24073ccb3c58dad74490a9b194f694039e75318f2a77f95f7790685a77b052df8e11e8faf63a3991062919978d57ad5096197bb0826a9103c1fd32
+SHA512 (notebook-5.7.2.tar.gz) = 4f94bea8c3be3bc7a7a1b23049852b0902d13fb3c58a752cc99fca0f7ad6c7b9d404f39d83ae8a533e1452bd38b0c8000ea99c66d5382fe17caf53ccdc3f7066