diff --git a/mxml-2.10.tar.gz b/mxml-2.10.tar.gz
new file mode 100644
index 0000000..b29bd21
--- /dev/null
+++ b/mxml-2.10.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:267ff58b64ddc767170d71dab0c729c06f45e1df9a9b6f75180b564f09767891
+size 265398
diff --git a/mxml-2.9.tar.gz b/mxml-2.9.tar.gz
deleted file mode 100644
index fbd8d78..0000000
--- a/mxml-2.9.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:cded54653c584b24c4a78a7fa1b3b4377d49ac4f451ddf170ebbc8161d85ff92
-size 264379
diff --git a/mxml.changes b/mxml.changes
index 1eff6d7..2f53097 100644
--- a/mxml.changes
+++ b/mxml.changes
@@ -1,3 +1,19 @@
+-------------------------------------------------------------------
+Fri Nov 11 14:50:28 UTC 2016 - mrueckert@suse.de
+
+- update to version 2.10
+  - The version number in mxml.h was wrong (Bug #532)
+  - The mxml.spec file was out of date (Bug #521)
+  - Mini-XML no longer allows malformed element names (Bug #509)
+  - mxmlLoad* and mxmlSAXLoad* did not properly create text nodes
+    when MXML_TEXT_CALLBACK was specified (Bug #531)
+  - mxmlDelete used a recursive algorithm which could require large
+    amounts of stack space depending on the file (Bug #549,
+    CVE-2016-4570) (bnc #979205)
+  - mxmlWrite* used a recursive algorithm which could require large
+    amounts of stack space depending on the file (Bug #549,
+    CVE-2016-4571) (bnc #979206)
+
 -------------------------------------------------------------------
 Thu Mar  5 15:01:03 UTC 2015 - p.drouand@gmail.com
 
diff --git a/mxml.spec b/mxml.spec
index 65e849f..590af55 100644
--- a/mxml.spec
+++ b/mxml.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package mxml
 #
-# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
 
 Name:           mxml
 Url:            http://www.msweet.org/projects.php?Z3
-Version:        2.9
+Version:        2.10
 Release:        0
 Summary:        Small XML Parsing Library
 License:        LGPL-2.1+