diff --git a/eglibc_2.19-0ubuntu2.debian.tar.xz b/eglibc_2.19-0ubuntu2.debian.tar.xz
deleted file mode 100644
index 8156157..0000000
Binary files a/eglibc_2.19-0ubuntu2.debian.tar.xz and /dev/null differ
diff --git a/eglibc_2.19-0ubuntu6.4.debian.tar.xz b/eglibc_2.19-0ubuntu6.4.debian.tar.xz
new file mode 100644
index 0000000..ee0be11
Binary files /dev/null and b/eglibc_2.19-0ubuntu6.4.debian.tar.xz differ
diff --git a/glibc.changes b/glibc.changes
index 4782f09..a7443e4 100644
--- a/glibc.changes
+++ b/glibc.changes
@@ -1,3 +1,6 @@
+* Fri Dec 5 2014 Davide Bettio <davide.bettio@ispirata.com> - 2.19
+- Upgrade to eglibc_2.19-0ubuntu6.4 (security fixes)
+
 * Thu Mar 20 2014 Davide Bettio <davide.bettio@ispirata.com> - 2.19
 - Upgrade to 2.19
 
diff --git a/glibc.spec b/glibc.spec
index 3e2daa2..f1845a0 100644
--- a/glibc.spec
+++ b/glibc.spec
@@ -9,7 +9,7 @@
 Summary: Embedded GLIBC (EGLIBC) is a variant of the GNU C Library (GLIBC)
 Name: glibc
 Version: 2.19
-Release: 1
+Release: 6.4
 
 # GPLv2+ is used in a bunch of programs, LGPLv2+ is used for libraries.
 # Things that are linked directly into dynamically linked programs
@@ -20,7 +20,7 @@ License: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
 Group: System/Libraries
 URL: http://www.eglibc.org/
 Source0: https://launchpad.net/ubuntu/+archive/primary/+files/eglibc_2.19.orig.tar.xz
-Source1: eglibc_2.19-0ubuntu2.debian.tar.xz
+Source1: http://archive.ubuntu.com/ubuntu/pool/main/e/eglibc/eglibc_2.19-0ubuntu%{release}.debian.tar.xz
 Source11: build-locale-archive.c
 
 # glibc-arm-alignment-fix.patch: safe but probably not needed anymore