diff --git a/miniupnpc-2.0.20170509.tar.gz b/miniupnpc-2.0.20170509.tar.gz
new file mode 100644
index 0000000..a49cfd5
--- /dev/null
+++ b/miniupnpc-2.0.20170509.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d3c368627f5cdfb66d3ebd64ca39ba54d6ff14a61966dbecb8dd296b7039f16a
+size 86055
diff --git a/miniupnpc-2.0.tar.gz b/miniupnpc-2.0.tar.gz
deleted file mode 100644
index 8b44cca..0000000
--- a/miniupnpc-2.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:d434ceb8986efbe199c5ca53f90ed53eab290b1e6d0530b717eb6fa49d61f93b
-size 85287
diff --git a/miniupnpc.changes b/miniupnpc.changes
index 95e7021..e2ae5c1 100644
--- a/miniupnpc.changes
+++ b/miniupnpc.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Tue May 23 14:18:10 UTC 2017 - joop.boonen@boonen.org
+
+- Build 2.0.20170509
+  * Fix CVE-2017-8798 Thanks to tin/Team OSTStrom
+  * bnc#1038601 fixes VUL-0: CVE-2017-8798: miniupnp: integer signedness error
+
 -------------------------------------------------------------------
 Sun Apr 24 19:05:35 UTC 2016 - idonmez@suse.com
 
diff --git a/miniupnpc.spec b/miniupnpc.spec
index da63700..4e10df8 100644
--- a/miniupnpc.spec
+++ b/miniupnpc.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package miniupnpc
 #
-# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
 
 %define soname 16
 Name:           miniupnpc
-Version:        2.0
+Version:        2.0.20170509
 Release:        0
 Summary:        Universal Plug'n'Play (UPnP) Client
 License:        BSD-3-Clause