diff --git a/_service b/_service
index 347d6b5..8ac6f22 100644
--- a/_service
+++ b/_service
@@ -4,7 +4,7 @@
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="url">https://github.com/matrix-org/synapse.git</param>
     <param name="scm">git</param>
-    <param name="revision">v1.15.1</param>
+    <param name="revision">v1.15.2</param>
     <param name="versionrewrite-pattern">v(.*)</param>
     <param name="versionrewrite-replacement">\1</param>
     <!--
diff --git a/matrix-synapse-1.15.1.obscpio b/matrix-synapse-1.15.1.obscpio
deleted file mode 100644
index b02339d..0000000
--- a/matrix-synapse-1.15.1.obscpio
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:2d7eb4f8142ea3d29115c72880cf0d367ae77ddb14378b071da5d6e78133b059
-size 27418125
diff --git a/matrix-synapse-1.15.2.obscpio b/matrix-synapse-1.15.2.obscpio
new file mode 100644
index 0000000..0d52864
--- /dev/null
+++ b/matrix-synapse-1.15.2.obscpio
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:56aa02bcc986ce3c236b7bae433331576bbedeba89bb223b6c89df3815d69a7c
+size 27419149
diff --git a/matrix-synapse-test.spec b/matrix-synapse-test.spec
index 2e1982b..9c86fb2 100644
--- a/matrix-synapse-test.spec
+++ b/matrix-synapse-test.spec
@@ -32,7 +32,7 @@
 
 %define         pkgname matrix-synapse
 Name:           %{pkgname}-test
-Version:        1.15.1
+Version:        1.15.2
 Release:        0
 Summary:        Test package for %{pkgname}
 License:        Apache-2.0
diff --git a/matrix-synapse.changes b/matrix-synapse.changes
index a78f844..4da1a3f 100644
--- a/matrix-synapse.changes
+++ b/matrix-synapse.changes
@@ -1,3 +1,17 @@
+-------------------------------------------------------------------
+Thu Jul  2 15:34:54 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
+
+- Update to 1.15.2
+  - Security
+    - A malicious homeserver could force Synapse to reset the state
+      in a room to a small subset of the correct state. This
+      affects all Synapse deployments which federate with untrusted
+      servers. (96e9afe6)
+    - HTML pages served via Synapse were vulnerable to clickjacking
+      attacks. This predominantly affects homeservers with
+      single-sign-on enabled, but all server administrators are
+      encouraged to upgrade. (ea26e9a9)
+
 -------------------------------------------------------------------
 Tue Jun 16 18:36:01 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
 
diff --git a/matrix-synapse.obsinfo b/matrix-synapse.obsinfo
index bdd8468..72b0035 100644
--- a/matrix-synapse.obsinfo
+++ b/matrix-synapse.obsinfo
@@ -1,5 +1,5 @@
 name: matrix-synapse
-version: 1.15.1
-mtime: 1592299864
-commit: 0fc5575c5b7cfed8263db91bc1f1335a52b9d62e
+version: 1.15.2
+mtime: 1593701594
+commit: 244649b7d514165e038d45506c33915f19f5a50d
 
diff --git a/matrix-synapse.spec b/matrix-synapse.spec
index 4f98802..1181730 100644
--- a/matrix-synapse.spec
+++ b/matrix-synapse.spec
@@ -46,7 +46,7 @@
 %define         modname synapse
 %define         pkgname matrix-synapse
 Name:           %{pkgname}
-Version:        1.15.1
+Version:        1.15.2
 Release:        0
 Summary:        Matrix protocol reference homeserver
 License:        Apache-2.0