diff --git a/.gitignore b/.gitignore
index 1ae7ab1..d5bf578 100644
--- a/.gitignore
+++ b/.gitignore
@@ -65,3 +65,4 @@
 /go1.12beta2.src.tar.gz
 /go1.12rc1.src.tar.gz
 /go1.12.src.tar.gz
+/go1.12.1.src.tar.gz
diff --git a/golang.spec b/golang.spec
index 90f77a2..6fba8fc 100644
--- a/golang.spec
+++ b/golang.spec
@@ -102,10 +102,10 @@
 %endif
 
 %global go_api 1.12
-%global go_version 1.12
+%global go_version 1.12.1
 
 Name:           golang
-Version:        1.12
+Version:        1.12.1
 Release:        1%{?dist}
 Summary:        The Go Programming Language
 # source tree includes several copies of Mark.Twain-Tom.Sawyer.txt under Public Domain
@@ -271,7 +271,7 @@ Requires(preun): %{_sbindir}/update-alternatives
 # This is an odd issue, still looking for a better fix.
 Requires:       glibc
 Requires:       gcc
-Requires:       git, subversion, mercurial
+Recommends:     git, subversion, mercurial
 %description    bin
 %{summary}
 
@@ -546,6 +546,13 @@ fi
 %endif
 
 %changelog
+* Fri Mar 15 2019 Jakub Čajka <jcajka@redhat.com> - 1.12.1-1
+- Rebase to 1.12.1
+- Fix CVE-2019-9741
+- Fix requirement for %preun (instead of %postun) scriptlet thanks to Tim Landscheidt
+- Use weak deps for SCM deps
+- Resolves: BZ#1688233
+
 * Wed Feb 27 2019 Jakub Čajka <jcajka@redhat.com> - 1.12-1
 - Rebase to go1.12 proper
 - Resolves:  BZ#1680040
diff --git a/sources b/sources
index c8d38d8..3d8e338 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (go1.12.src.tar.gz) = 6a4b8e75b3f6455885e93961c502ab40822e6353d1108ce25ca857afbdca08a64b1408dbeba2d37db581d6c85b9a919de95fb7c0d487a327e555a30b51cd8410
+SHA512 (go1.12.1.src.tar.gz) = b3fdfb874e6e0e0b50458085724fbd8e8b9be212df3f777b97db340aa3b80f32ee08d646a57a8a7d52ff6f19657d884dd25018c866c6173473aafa20a58f1975