diff --git a/libupnp-1.14.2.tar.bz2 b/libupnp-1.14.2.tar.bz2
deleted file mode 100644
index 9cb4902..0000000
--- a/libupnp-1.14.2.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ffe3045b91a4c951d105e0db98cd043341f1f4342ddaf23916e15a5792d5c270
-size 672650
diff --git a/libupnp-1.14.5.tar.bz2 b/libupnp-1.14.5.tar.bz2
new file mode 100644
index 0000000..fc33d9a
--- /dev/null
+++ b/libupnp-1.14.5.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:227ffa407be6b91d4e42abee1dd27e4b8d7e5ba8d3d45394cca4e1eadc65149a
+size 677825
diff --git a/libupnp.changes b/libupnp.changes
index f946ca9..fadd3ae 100644
--- a/libupnp.changes
+++ b/libupnp.changes
@@ -1,3 +1,16 @@
+-------------------------------------------------------------------
+Tue Apr  6 23:38:27 UTC 2021 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 1.14.5
+  * Non-recursive version of ixmlNode_free() avoids stack overflow
+    attack (Fixes CVE-2021-28302).
+
+-------------------------------------------------------------------
+Tue Mar 30 06:28:49 UTC 2021 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 1.14.4
+  * Fix for gena leak.
+
 -------------------------------------------------------------------
 Mon Mar  1 06:47:53 UTC 2021 - Jan Engelhardt <jengelh@inai.de>
 
diff --git a/libupnp.spec b/libupnp.spec
index e13cc67..80df1ea 100644
--- a/libupnp.spec
+++ b/libupnp.spec
@@ -20,7 +20,7 @@
 %define pnpver 17
 %define ixmlver 11
 Name:           libupnp
-Version:        1.14.2
+Version:        1.14.5
 Release:        0
 Summary:        An implementation of Universal Plug and Play (UPnP)
 License:        BSD-3-Clause