diff --git a/exempi-2.2.2.tar.bz2 b/exempi-2.2.2.tar.bz2
deleted file mode 100644
index d81e56c..0000000
--- a/exempi-2.2.2.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:0e7ad0e5e61b6828e38d31a8cc59c26c9adeed7edf4b26708c400beb6a686c07
-size 3380662
diff --git a/exempi-2.2.2.tar.bz2.asc b/exempi-2.2.2.tar.bz2.asc
deleted file mode 100644
index 2cb2c0e..0000000
--- a/exempi-2.2.2.tar.bz2.asc
+++ /dev/null
@@ -1,7 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1
-
-iEYEABECAAYFAlQD4rUACgkQX+4F5qVuFaPYsACeJ/JzbFIFBE950MF92v02/Tan
-888An0nojYEGGUgn+scqC3bFOCOiE0dp
-=d0uc
------END PGP SIGNATURE-----
diff --git a/exempi-2.4.5.tar.bz2 b/exempi-2.4.5.tar.bz2
new file mode 100644
index 0000000..8ff5bee
--- /dev/null
+++ b/exempi-2.4.5.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:406185feb88e84ea1d4b4251370be2991205790d7113a7e28e192ff46a4f221e
+size 3615134
diff --git a/exempi-2.4.5.tar.bz2.asc b/exempi-2.4.5.tar.bz2.asc
new file mode 100644
index 0000000..e418182
--- /dev/null
+++ b/exempi-2.4.5.tar.bz2.asc
@@ -0,0 +1,6 @@
+-----BEGIN PGP SIGNATURE-----
+
+iEYEABECAAYFAlqgq08ACgkQX+4F5qVuFaNeLwCgz4MWXwc+jl2vMPf0zbeOgFg2
+qf4AnAw1DJC4jNhc9xXaCkQfDYYG3R1m
+=4wPW
+-----END PGP SIGNATURE-----
diff --git a/exempi.changes b/exempi.changes
index f37fe29..bb350a2 100644
--- a/exempi.changes
+++ b/exempi.changes
@@ -1,3 +1,37 @@
+-------------------------------------------------------------------
+Wed Mar 14 13:20:57 UTC 2018 - kbabioch@suse.com
+
+- Update to 2.4.5:
+  * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295)
+  * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297)
+  * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296)
+  * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294)
+  * Properly initialize pointers in WEBP.
+  * Fix an infinite loop in RIFF parser.
+  * Fix an infinite loop in QuickTime parser.
+  * Fix an infinite loop in ASF parser.
+  * Adjust minimum version for gcc in documentation.
+  * Fix a buffer overrun, memcpy() on overlapping regions, use after free in
+    the exception handling.  Fix a fatal assert with corrupt WEBP.
+  * Fix a crash on a corrupt file.
+  * Upgrade XMPCore to Adobe XMP CC 2014.12.
+    * New flag to optimize layout on MPEG4 files.
+    * GoPro MPEG4 video files support.
+    * Improved JPEG support.
+    * iXML support in WAVE files.
+    * Several bugs and memory leaks fixes.
+    * Changes from Adobe XMP CC 2013.06.
+      * Pluggable file handlers (not exposed yet in Exempi)
+      * Support for Exif 2.3 properties
+      * New RIFF file handler
+      * Better Postscript support.
+      * Lot of bug fixes.
+  * Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
+  * WebP format handler (contributed: Frankie Dintino, The Atlantic)
+  * Several API improvements
+  * Fix potential crash with corrupt TIFF file.
+  * Fix header to pass -Wstrict-prototypes
+
 -------------------------------------------------------------------
 Wed Feb  1 10:45:36 UTC 2017 - adam.majer@suse.de
 
diff --git a/exempi.spec b/exempi.spec
index 6d9e03e..ed8f178 100644
--- a/exempi.spec
+++ b/exempi.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package exempi
 #
-# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
 
 %define debug_package_requires libexempi3 = %{version}
 Name:           exempi
-Version:        2.2.2
+Version:        2.4.5
 Release:        0
 Summary:        XMP support library
 License:        BSD-3-Clause