diff --git a/SIGNATURES-3.2.0.txt b/SIGNATURES-3.2.0.txt
deleted file mode 100644
index c6fb954..0000000
--- a/SIGNATURES-3.2.0.txt
+++ /dev/null
@@ -1,60 +0,0 @@
------BEGIN PGP SIGNED MESSAGE-----
-Hash: SHA512
-
-wireshark-3.2.0.tar.xz: 31550972 bytes
-SHA256(wireshark-3.2.0.tar.xz)=4cfd33a19a454ff4002243e9d04d6afd64280a109a21ae652a192f2be2b1b66c
-RIPEMD160(wireshark-3.2.0.tar.xz)=cb8aab36143465b6e7e8121bc2cbdc8c315494a7
-SHA1(wireshark-3.2.0.tar.xz)=6c7d9784809fb16b57ca557864f78509aaf4f82a
-
-Wireshark-win32-3.2.0.exe: 63919160 bytes
-SHA256(Wireshark-win32-3.2.0.exe)=a2e8a26ea751477fd3b26ddc755e27be1c91746ef115324f4c51c0b009e46740
-RIPEMD160(Wireshark-win32-3.2.0.exe)=13478816e67f172da86a03840da88a4750daf487
-SHA1(Wireshark-win32-3.2.0.exe)=128b13aa651a6323bc89cbef8cbd8407c6e70294
-
-Wireshark-win64-3.2.0.exe: 69147616 bytes
-SHA256(Wireshark-win64-3.2.0.exe)=373af8674889b446412fb4c34f9b0299c66724086343238ea2b3a99e9e8d80d7
-RIPEMD160(Wireshark-win64-3.2.0.exe)=914d2b45fe48324df973ccac68db4e2fd9ed8f35
-SHA1(Wireshark-win64-3.2.0.exe)=7c81840143c3a065795873b7237e5add6131e957
-
-Wireshark-win64-3.2.0.msi: 48230400 bytes
-SHA256(Wireshark-win64-3.2.0.msi)=35f03abd34817ed05919bdc2609b52185bade17cdab2ffbf8bac395c640b5e99
-RIPEMD160(Wireshark-win64-3.2.0.msi)=bf018d18f7f624f3fb2f056bc6ce94d939028b8e
-SHA1(Wireshark-win64-3.2.0.msi)=9931b56a62fb46fc005196da2b219287a283fbbe
-
-Wireshark-win32-3.2.0.msi: 42917888 bytes
-SHA256(Wireshark-win32-3.2.0.msi)=5d2bbe7cf71bd9f1a717765ce4058f69a7df552813d7c4cf424ac896c4bc0ec8
-RIPEMD160(Wireshark-win32-3.2.0.msi)=806aa3938de437d23f04e965a8128764fb9b9f99
-SHA1(Wireshark-win32-3.2.0.msi)=561440ae0f2067f8d099028c2e86ad5ae8547218
-
-WiresharkPortable_3.2.0.paf.exe: 36523736 bytes
-SHA256(WiresharkPortable_3.2.0.paf.exe)=dcf2f54b574ea1c5378993f6d50ece0aed78ca30057f8a74a291373a4fc2530f
-RIPEMD160(WiresharkPortable_3.2.0.paf.exe)=46aeac519c32325c3f947f783c0588415fd36726
-SHA1(WiresharkPortable_3.2.0.paf.exe)=d942f10b7854f40ef8102d8d8a00983707f1b8e6
-
-Wireshark 3.2.0 Intel 64.dmg: 96319887 bytes
-SHA256(Wireshark 3.2.0 Intel 64.dmg)=a1f5b86d3ae8a2be38db218d07ad1d123315433292adae71a9756bbc881438ee
-RIPEMD160(Wireshark 3.2.0 Intel 64.dmg)=e2fcd24a57e93e43bbe0cd7e4ea8768af13c45da
-SHA1(Wireshark 3.2.0 Intel 64.dmg)=d8ec239ffb70a6eab7e6cde9668674f7fec2d01d
-
-You can validate these hashes using the following commands (among others):
-
-    Windows: certutil -hashfile Wireshark-win64-x.y.z.exe SHA256
-    Linux (GNU Coreutils): sha256sum wireshark-x.y.z.tar.xz
-    macOS: shasum -a 256 "Wireshark x.y.z Intel 64.dmg"
-    Other: openssl sha256 wireshark-x.y.z.tar.xz
------BEGIN PGP SIGNATURE-----
-
-iQIzBAEBCgAdFiEEWlrbp9vqbD+HIk8ZgiRKeOb+ruoFAl36gvcACgkQgiRKeOb+
-ruqgPxAA6lGIMbZ9uZqWWStLjLvayOt+i0Npr1GjT0BQgmfv8UFrscWGFEXfM2Rw
-ov9LdFcurN8XZg1+aSfUDxFkRQeMv8raieW91v65SFJ1Ro6tDToYv7sl96FsPJkB
-HztFreUoxW64/x5/Nq/mcMRdJfSvaWG5tMQ7fhq7OVmtB+qUySUKFCgqyFBm0naV
-bTCb9K9KCraciW5Dss4NWsWgVSKAjKpjmiSobEZ+7iJUdKS+MB0NLo4C8Yt+wenZ
-AyF0JiStxL0ZkGOqodJnLQNAWT4EdOoyqpWxcPIt32gFKSpbgxgOPgTD2RtCLRps
-XkURhKhQOyAVv1bfq1x9lmCzwpuLxYM+jojzCsfCS4PD6R3/g/dZCQ+MkXSgOvUQ
-R5NCC3ZED3uVQxJMPwyqwjrzM4C6rCcyvo3yFOfBJqwc27CvSP6YRCegdhLEwIat
-qMyuTghgVrguoAnqiq/hMvQERb/PeoydSdgSVY4qJuAT7i3iB6EXDTy3PNrs6pdH
-YLUURQV7Q9hR8YozS7uIhpaFSCC/Khjet5bcb4biyN8phXOJSv0Kumk7N2k4lLiK
-tsJV+qOF/vXbSyAxCJcaTRNvgndFPpYgZh/m8ZlphUCnP78U+dv1QWgznfwy+k+j
-bVyzuPDqJw4p7F1CHKukBVHf/LiC7K9Oxy2MmcRNmGzZW6IZlMI=
-=hMEe
------END PGP SIGNATURE-----
diff --git a/SIGNATURES-3.2.1.txt b/SIGNATURES-3.2.1.txt
new file mode 100644
index 0000000..76dbe76
--- /dev/null
+++ b/SIGNATURES-3.2.1.txt
@@ -0,0 +1,60 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA512
+
+wireshark-3.2.1.tar.xz: 31522124 bytes
+SHA256(wireshark-3.2.1.tar.xz)=589f640058d6408ebbd695a80ebbd6e7bd99d8db64ecda253d27100dfd27e85b
+RIPEMD160(wireshark-3.2.1.tar.xz)=decbaf93645bd2b5283b5307b4730a6967116e3b
+SHA1(wireshark-3.2.1.tar.xz)=d0b8eb3e01264afb98ec151d7114ed14cf174ced
+
+Wireshark-win64-3.2.1.exe: 60054504 bytes
+SHA256(Wireshark-win64-3.2.1.exe)=7c69778b9f35fa5335dc5b8e6e1cbbe2e18a7fdfe77b47edb7402206c93ee5d4
+RIPEMD160(Wireshark-win64-3.2.1.exe)=28ae37dca5a7b6584cfa8618ca735221e7bd9603
+SHA1(Wireshark-win64-3.2.1.exe)=9d1b731fea3ebe8840c8c6eecc0bbaf6ce9f7100
+
+Wireshark-win32-3.2.1.exe: 54755072 bytes
+SHA256(Wireshark-win32-3.2.1.exe)=20d8861550367ae6ba588a34eabcd149090a5a2da9f2849a2609857929dd5513
+RIPEMD160(Wireshark-win32-3.2.1.exe)=e1f1dc2fcd4788948718fe16d271d330eeb8691c
+SHA1(Wireshark-win32-3.2.1.exe)=c2f0e86283a463149012da38b89869d29f6f4b65
+
+Wireshark-win32-3.2.1.msi: 42926080 bytes
+SHA256(Wireshark-win32-3.2.1.msi)=9ff38be33feefa9c08b2c06f60d0630b5674a1c1d92ac1454beb6e071411d60d
+RIPEMD160(Wireshark-win32-3.2.1.msi)=e822c270679c844b0d68660b37bad8c4404e2972
+SHA1(Wireshark-win32-3.2.1.msi)=7956c6629a12aa68c48f128f75bed8611edc2a6f
+
+Wireshark-win64-3.2.1.msi: 48230400 bytes
+SHA256(Wireshark-win64-3.2.1.msi)=23e6b6f3c348d860d8ec12088c8094434c4c3bc3897f7e3ae949939ec24ccc2d
+RIPEMD160(Wireshark-win64-3.2.1.msi)=89e5676d0129841c3fe1c9e802831b11e1a95a9e
+SHA1(Wireshark-win64-3.2.1.msi)=6861d5221b5c8bcc44fef7af141e195cc88d17ca
+
+WiresharkPortable_3.2.1.paf.exe: 36534000 bytes
+SHA256(WiresharkPortable_3.2.1.paf.exe)=82ba51f4568071341d7484f92033939647c275537180419fe49617adbb3b3c9e
+RIPEMD160(WiresharkPortable_3.2.1.paf.exe)=37086e00dad1abc223e6c2ed561525f5545d0d97
+SHA1(WiresharkPortable_3.2.1.paf.exe)=983378044b9672338357c66cd63fdb9fe40401df
+
+Wireshark 3.2.1 Intel 64.dmg: 96254431 bytes
+SHA256(Wireshark 3.2.1 Intel 64.dmg)=a1b08841676b626e3dee42274ad321b90c31eccda6808c59ee5ea644e3782cb4
+RIPEMD160(Wireshark 3.2.1 Intel 64.dmg)=a4e88414580b29563dd0b44cc2acb0132d9f315f
+SHA1(Wireshark 3.2.1 Intel 64.dmg)=1b43fedae40e99006508476927357df203e88f10
+
+You can validate these hashes using the following commands (among others):
+
+    Windows: certutil -hashfile Wireshark-win64-x.y.z.exe SHA256
+    Linux (GNU Coreutils): sha256sum wireshark-x.y.z.tar.xz
+    macOS: shasum -a 256 "Wireshark x.y.z Intel 64.dmg"
+    Other: openssl sha256 wireshark-x.y.z.tar.xz
+-----BEGIN PGP SIGNATURE-----
+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+=0QNh
+-----END PGP SIGNATURE-----
diff --git a/wireshark-3.2.0.tar.xz b/wireshark-3.2.0.tar.xz
deleted file mode 100644
index 5c73bf1..0000000
--- a/wireshark-3.2.0.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:4cfd33a19a454ff4002243e9d04d6afd64280a109a21ae652a192f2be2b1b66c
-size 31550972
diff --git a/wireshark-3.2.1.tar.xz b/wireshark-3.2.1.tar.xz
new file mode 100644
index 0000000..68adf80
--- /dev/null
+++ b/wireshark-3.2.1.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:589f640058d6408ebbd695a80ebbd6e7bd99d8db64ecda253d27100dfd27e85b
+size 31522124
diff --git a/wireshark.changes b/wireshark.changes
index c9b5daf..f5bacb9 100644
--- a/wireshark.changes
+++ b/wireshark.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Thu Jan 16 08:39:33 UTC 2020 - Robert Frohl <rfrohl@suse.com>
+
+- wireshark 3.2.1
+  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
+- Further features, bug fixes and updated protocol support as listed in:
+  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html
+
 -------------------------------------------------------------------
 Thu Dec 19 08:54:00 UTC 2019 - Robert Frohl <rfrohl@suse.com>
 
diff --git a/wireshark.spec b/wireshark.spec
index dde4358..c6ac072 100644
--- a/wireshark.spec
+++ b/wireshark.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package wireshark
 #
-# Copyright (c) 2019 SUSE LLC
+# Copyright (c) 2020 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -27,7 +27,7 @@
 %bcond_with lz4
 %endif
 Name:           wireshark
-Version:        3.2.0
+Version:        3.2.1
 Release:        0
 Summary:        A Network Traffic Analyser
 License:        GPL-2.0-or-later AND GPL-3.0-or-later
@@ -42,6 +42,8 @@ BuildRequires:  glib2-devel >= 2.32
 BuildRequires:  hicolor-icon-theme
 BuildRequires:  krb5-devel
 BuildRequires:  libbrotli-devel
+# keep until libbrotli-devel bug is fixed
+BuildRequires:  libbrotlidec1
 BuildRequires:  libcap-devel
 BuildRequires:  libcares-devel
 BuildRequires:  libgcrypt-devel >= 1.8.0
@@ -65,6 +67,9 @@ BuildRequires:  pkgconfig(libsystemd)
 BuildRequires:  pkgconfig(libxml-2.0)
 Requires(pre):  permissions
 Requires(pre):  shadow
+Requires:       brotli
+# keep until libbrotli-devel bug is fixed
+Requires:       libbrotlidec1
 Recommends:     wireshark-ui = %{version}
 Provides:       ethereal = %{version}
 Obsoletes:      %{libcodecs} < %{version}