diff --git a/squid-6.10.tar.xz b/squid-6.10.tar.xz
deleted file mode 100644
index 96b39e0..0000000
--- a/squid-6.10.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:0b07b187e723f04770dd25beb89aec12030a158696aa8892d87c8b26853408a7
-size 2558208
diff --git a/squid-6.10.tar.xz.asc b/squid-6.10.tar.xz.asc
deleted file mode 100644
index eb52da6..0000000
--- a/squid-6.10.tar.xz.asc
+++ /dev/null
@@ -1,17 +0,0 @@
-File: squid-6.10.tar.xz
-Date: Sat Jun  8 02:53:29 PM UTC 2024
-Size: 2558208
-MD5 : 86deefa7282c4388be95260aa4d4cf6a
-SHA1: 70e90865df0e4e9ba7765b622da40bda9bb8fc5d
-Key : 29B4B1F7CE03D1B1DED22F3028F85029FEF6E865 <kinkie@squid-cache.org>
-            29B4 B1F7 CE03 D1B1 DED2  2F30 28F8 5029 FEF6 E865
-sub   cv25519 2021-05-15 [E]
-      keyring = http://www.squid-cache.org/pgp.asc
-      keyserver = pool.sks-keyservers.net
------BEGIN PGP SIGNATURE-----
-
-iHUEABYKAB0WIQQptLH3zgPRsd7SLzAo+FAp/vboZQUCZmRwewAKCRAo+FAp/vbo
-ZZV0AP0WDdXJFarEEYCSXSv/zT1l0FrI8jLQCT3Rsp6nTbWxfwD/VYmUMDetPLPJ
-GYHJNrRm7OceMQcsqhQIz6X71SR9AQs=
-=4HPC
------END PGP SIGNATURE-----
diff --git a/squid-6.12.tar.xz b/squid-6.12.tar.xz
new file mode 100644
index 0000000..ffeaefa
--- /dev/null
+++ b/squid-6.12.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:f3df3abb2603a513266f24a5d4699a9f0d76b9f554d1848b67f9c51cd3b3cb50
+size 2548220
diff --git a/squid-6.12.tar.xz.asc b/squid-6.12.tar.xz.asc
new file mode 100644
index 0000000..865a651
--- /dev/null
+++ b/squid-6.12.tar.xz.asc
@@ -0,0 +1,17 @@
+File: squid-6.12.tar.xz
+Date: Fri Oct 11 08:30:43 PM UTC 2024
+Size: 2548220
+MD5 : 26a264b234e22e012ea531d4f5d43ed1
+SHA1: 2885015423b66f0b87e2e3ed0dfd17f3f124d7e6
+Key : 29B4B1F7CE03D1B1DED22F3028F85029FEF6E865 <kinkie@squid-cache.org>
+            29B4 B1F7 CE03 D1B1 DED2  2F30 28F8 5029 FEF6 E865
+sub   cv25519 2021-05-15 [E]
+      keyring = http://www.squid-cache.org/pgp.asc
+      keyserver = pool.sks-keyservers.net
+-----BEGIN PGP SIGNATURE-----
+
+iHUEABYKAB0WIQQptLH3zgPRsd7SLzAo+FAp/vboZQUCZwmLBQAKCRAo+FAp/vbo
+ZYYJAP9pMd7sF4qmLLMlHIu48KMKqGhJdkEEpZJbOvmXS4lpBQD/QzCU3cng78NN
+orwehX0iYHf0lWvY8IjBV/9YEPi9iww=
+=yaaw
+-----END PGP SIGNATURE-----
diff --git a/squid.changes b/squid.changes
index e9dfbbf..cf08bd4 100644
--- a/squid.changes
+++ b/squid.changes
@@ -1,3 +1,20 @@
+-------------------------------------------------------------------
+Mon Dec  9 13:01:22 UTC 2024 - Adam Majer <adam.majer@suse.de>
+
+- Update to 6.12
+  - Fix validation of Digest auth header parameters
+
+- changes since squid-6.11:
+  - Fix Kerberos detection when cross-compiling
+  - Improve robustness of DNS code on reconfigure
+  - Prevent slow memory leak in TCP DNS queries
+  - Improve errors emitted when invalid ACLs are parsed
+
+-------------------------------------------------------------------
+Mon Nov 25 11:31:27 UTC 2024 - Adam Majer <adam.majer@suse.de>
+
+- Disble ESI. The code is removed upstream in 7.x (bsc#1232485, CVE-2024-45802)
+
 -------------------------------------------------------------------
 Thu Jun 27 07:00:50 UTC 2024 - Adam Majer <adam.majer@suse.de>
 
diff --git a/squid.spec b/squid.spec
index 14be492..f81a9cf 100644
--- a/squid.spec
+++ b/squid.spec
@@ -24,7 +24,7 @@
 %define         squidhelperdir %{_sbindir}
 %endif
 Name:           squid
-Version:        6.10
+Version:        6.12
 Release:        0
 Summary:        Caching and forwarding HTTP web proxy
 License:        GPL-2.0-or-later
@@ -138,7 +138,6 @@ export CXX=g++-11
 	--enable-removal-policies=heap,lru \
 	--enable-icmp \
 	--enable-delay-pools \
-	--enable-esi \
 	--enable-icap-client \
 	--enable-useragent-log \
 	--enable-referer-log \