diff --git a/munin-2.0.25.tar.gz b/munin-2.0.25.tar.gz
deleted file mode 100644
index 281d52d..0000000
--- a/munin-2.0.25.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:6832bc5839d03639e4309178d9370697fc8a80a83d9b6653953f40161e949694
-size 1337586
diff --git a/munin-2.0.32.tar.gz b/munin-2.0.32.tar.gz
new file mode 100644
index 0000000..7fa8b74
--- /dev/null
+++ b/munin-2.0.32.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:132ed808f637af661b5ec8d51415638a53d175a8e0ab10878b89a28f67d018a8
+size 1342572
diff --git a/munin.changes b/munin.changes
index 837b7cb..301b6a7 100644
--- a/munin.changes
+++ b/munin.changes
@@ -1,3 +1,26 @@
+-------------------------------------------------------------------
+Thu Mar  2 13:45:33 UTC 2017 - aj@ajaissle.de
+
+- fix source url
+- update to 2.0.32
+- remove CVE-2017-6188-fix-parameter-injection.patch (applied upstream)
+
+-------------------------------------------------------------------
+Thu Feb 23 12:33:21 UTC 2017 - wr@rosenauer.org
+
+- fix CVE-2017-6188: munin-cgi-graph local file write vulnerability
+  (boo#1026539, CVE-2017-6188-fix-parameter-injection.patch)
+
+-------------------------------------------------------------------
+Sun Feb 19 16:08:24 UTC 2017 - wr@rosenauer.org
+
+- update to version 2.0.30
+  Bugfix releases (closes the following issues since 2.0.25)
+  2.0.26: Closes: D:761190, GH:426
+  2.0.27: Closes: D:767032, D:768553, D:825136, D:834194, GH:690, GH:714
+  2.0.29: Closes: D:847649, D:849383
+  2.0.30: Closes: GH:745, GH:771, GH:783
+
 -------------------------------------------------------------------
 Tue Jan 17 13:04:06 UTC 2017 - bwiedemann@suse.com
 
diff --git a/munin.spec b/munin.spec
index ebfc537..fbfc24d 100644
--- a/munin.spec
+++ b/munin.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package munin
 #
-# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -16,21 +16,21 @@
 #
 
 
-%define		htmldir		/srv/www/htdocs/munin
-%define		cgidir		/srv/www/cgi-bin
-%define		dbdir		/var/lib/munin
-%define		logdir		/var/log/munin
-%define         plugindir       /usr/lib/munin/plugins
-%define 	active_by_default 0
+%define	htmldir /srv/www/htdocs/munin
+%define	cgidir /srv/www/cgi-bin
+%define	dbdir /var/lib/munin
+%define	logdir /var/log/munin
+%define plugindir /usr/lib/munin/plugins
+%define active_by_default 0
 
 Name:           munin
-Version:        2.0.25
+Version:        2.0.32
 Release:        0
 Summary:        Network-wide graphing framework (grapher/gatherer)
 License:        GPL-2.0
 Group:          System/Monitoring
 Url:            http://munin-monitoring.org/
-Source0:        http://heanet.dl.sourceforge.net/sourceforge/%{name}/%{name}-%{version}.tar.gz
+Source0:        http://downloads.munin-monitoring.org/%{name}/stable/%{version}/%{name}-%{version}.tar.gz
 Source1:        Makefile.config
 Source2:        munin-node.rc
 Source3:        munin.cron.d
@@ -100,10 +100,10 @@ RRDtool.
 
 %package node
 Summary:        Network-wide graphing framework (node)
-Group:          System/Monitoring
 # some scripts need logtail which is part of package logdigest in openSUSE
 # problem with logdigest is that it installs a cronjob for itself which
 # might be unwanted
+Group:          System/Monitoring
 Recommends:     logdigest
 Requires:       perl-HTML-Template
 Requires:       perl-Log-Log4perl