diff --git a/.gitignore b/.gitignore
index 12e50aa..a26f4fa 100644
--- a/.gitignore
+++ b/.gitignore
@@ -70,3 +70,4 @@
 /go1.12.5.src.tar.gz
 /go1.12.6.src.tar.gz
 /go1.12.7.src.tar.gz
+/go1.12.9.src.tar.gz
diff --git a/golang.spec b/golang.spec
index 9cc85e8..55ddc81 100644
--- a/golang.spec
+++ b/golang.spec
@@ -102,10 +102,10 @@
 %endif
 
 %global go_api 1.12
-%global go_version 1.12.7
+%global go_version 1.12.9
 
 Name:           golang
-Version:        1.12.7
+Version:        1.12.9
 Release:        1%{?dist}
 Summary:        The Go Programming Language
 # source tree includes several copies of Mark.Twain-Tom.Sawyer.txt under Public Domain
@@ -546,6 +546,11 @@ fi
 %endif
 
 %changelog
+* Mon Aug 26 2019 Jakub Čajka <jcajka@redhat.com> - 1.12.9-1
+- Rebase to 1.12.9
+- Fix for CVE-2019-14809, CVE-2019-9514 and CVE-2019-9512
+- Resolves: BZ#1741816, BZ#1741827 and BZ#1743131
+
 * Tue Jul 09 2019 Jakub Čajka <jcajka@redhat.com> - 1.12.7-1
 - Rebase to 1.12.7
 - Resolves: BZ#1728056
diff --git a/sources b/sources
index e5b609e..19a16cc 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (go1.12.7.src.tar.gz) = f84c6b89dea9df21f0efa07564eb80baeee5bc2d68cced5fd645ebb32e9317e60b657afe011c81e7739d8a93e4b4dafa0b4f78431a009d36e05de55f89ed0fd6
+SHA512 (go1.12.9.src.tar.gz) = 57041e7fb767f528aa9fc2592d205d3a7c120c73f92dc8d91f17f816e12aa6152c8421b333081800a5f50b1bb656f203a25faf8ed92c69a6ec164ce0a5619c13