diff --git a/_servicedata b/_servicedata
index 88eacf9..dd1d906 100644
--- a/_servicedata
+++ b/_servicedata
@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/DimStar77/openSUSE-appstream.git</param>
-              <param name="changesrevision">39008e0c9df9f404666d7979e4b166840be6c436</param></service></servicedata>
\ No newline at end of file
+              <param name="changesrevision">e7c9645b8b2182fd50d6f1945316ac24ce4289c9</param></service></servicedata>
\ No newline at end of file
diff --git a/libzypp-plugin-appdata.changes b/libzypp-plugin-appdata.changes
index 6bde76e..26428b4 100644
--- a/libzypp-plugin-appdata.changes
+++ b/libzypp-plugin-appdata.changes
@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Tue Jan 17 12:02:21 UTC 2023 - dimstar@opensuse.org
+
+- Update to version 1.0.1+git.20230117:
+  * InstallAppdata: use subprocess.run instead of os.system (CVE-2023-22643)
+
+-------------------------------------------------------------------
+Tue Jan 17 11:07:35 UTC 2023 - dimstar@opensuse.org
+
+- Update to version 1.0.1+git.20220909:
+  * Add dist directory, for openSUSE packaging
+
 -------------------------------------------------------------------
 Tue Aug 16 12:19:30 UTC 2022 - dimstar@opensuse.org
 
diff --git a/libzypp-plugin-appdata.spec b/libzypp-plugin-appdata.spec
index fdb3f7d..9bfdbe2 100644
--- a/libzypp-plugin-appdata.spec
+++ b/libzypp-plugin-appdata.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package libzypp-plugin-appdata
 #
-# Copyright (c) 2022 SUSE LLC
+# Copyright (c) 2023 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:           libzypp-plugin-appdata
-Version:        1.0.1+git.20220816
+Version:        1.0.1+git.20230117
 Release:        0
 Summary:        libzypp extension to handle AppStream metadata
 License:        CC0-1.0 AND MIT
diff --git a/openSUSE-appstream-1.0.1+git.20220816.tar.xz b/openSUSE-appstream-1.0.1+git.20220816.tar.xz
deleted file mode 100644
index 852f102..0000000
--- a/openSUSE-appstream-1.0.1+git.20220816.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:e31e8cea0f3f592bfe150dfa52d80ac2ef4af7d369df4c0416889c08c0bf6b1c
-size 91504
diff --git a/openSUSE-appstream-1.0.1+git.20230117.tar.xz b/openSUSE-appstream-1.0.1+git.20230117.tar.xz
new file mode 100644
index 0000000..f4babaa
--- /dev/null
+++ b/openSUSE-appstream-1.0.1+git.20230117.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:530171325f48b3e63bb50b7b585d51d3841064f9db5eac06a7a26fd86ef5f2b3
+size 95292