diff --git a/matomo-4.12.0.tar.gz b/matomo-4.12.0.tar.gz
deleted file mode 100644
index e9bfcee..0000000
--- a/matomo-4.12.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:5808947e234d278d1a5d33509014197e8882e5d15d7a31be77b31cee259c4928
-size 17161125
diff --git a/matomo-4.12.1.tar.gz b/matomo-4.12.1.tar.gz
new file mode 100644
index 0000000..1d26b3a
--- /dev/null
+++ b/matomo-4.12.1.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:a8b5eaf4ede42b71a68b0bf869e974f1e123972e8177e8fe531cc9684d04540f
+size 17207501
diff --git a/matomo.changes b/matomo.changes
index 0475756..9431fa6 100644
--- a/matomo.changes
+++ b/matomo.changes
@@ -1,3 +1,27 @@
+-------------------------------------------------------------------
+Wed Oct 19 05:16:52 UTC 2022 - ecsos <ecsos@opensuse.org>
+
+- Update to 4.12.1
+  There is one low impact security fix in this patch release to add
+  missing escaping to prevent a Cross-site Scripting attack by a
+  super user on another super user.
+  * matomo-org/matomo
+    - #19853 Goal visits log query performance improvement – don’t execute the query when no idVisits
+    - #19819 Ensure empty report tables also use max width
+    - #19838 Avoid loading goals data multiple times for goal metrics
+    - #19833 Allow empty excludedReferrers on the global setting
+    - #19863 Adds missing escaping
+    - #19768 Upgrade to Matomo 4.12 breaks Matomo when DeviceDetectorCache plugin is installed
+    - #19870 Fix failures link to Learn More
+    - #19808 Visits Overview accessibility improvement – remove redundant information
+    - #19809 TourEngagement accessibility improvement – Remove redundant information
+    - #19817 Fix Referrers.getKeywordsFromSearchEngineId API for invalid subtable ids
+    - #19869 PHP8 fix – Ensure data retention settings are respected
+    - #19841 Check downloaded referrer spam list for validity
+    - #19827 Return correct parameter divId for JS opt-out
+    - #19852 Fix array to string conversion warning in userOptOut
+    - #19861 Ensure password check can only throw wrong password error
+
 -------------------------------------------------------------------
 Wed Oct  5 05:15:35 UTC 2022 - ecsos <ecsos@opensuse.org>
 
diff --git a/matomo.spec b/matomo.spec
index ff2ad95..ddd6b6c 100644
--- a/matomo.spec
+++ b/matomo.spec
@@ -21,7 +21,7 @@
 %{!?_tmpfilesdir:%global _tmpfilesdir %{_prefix}/lib/tmpfiles.d}
 
 Name:           matomo
-Version:        4.12.0
+Version:        4.12.1
 Release:        0
 Summary:        Web analytics platform
 License:        GPL-3.0-or-later