diff --git a/soundtouch-2.1.0.tar.gz b/soundtouch-2.1.0.tar.gz
deleted file mode 100644
index fabf0e2..0000000
--- a/soundtouch-2.1.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:454712b08bf758f6a4c0df8821350c323e5b274443a20e21d193d17c5dc3d0d5
-size 458371
diff --git a/soundtouch-2.1.2.tar.gz b/soundtouch-2.1.2.tar.gz
new file mode 100644
index 0000000..98261b9
--- /dev/null
+++ b/soundtouch-2.1.2.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:2826049e2f34efbc4c8a47d00c93649822b0c14e1f29f5569835704814590732
+size 522003
diff --git a/soundtouch.changes b/soundtouch.changes
index 035d95d..1833f23 100644
--- a/soundtouch.changes
+++ b/soundtouch.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Fri Dec  7 12:57:44 UTC 2018 - Marketa Calabkova <mcalabkova@suse.com>
+
+- Update to version 2.1.2
+  * Bugfixes: Fixed potential buffer overwrite bugs in WavFile routines. 
+    Replaced asserts with runtime exceptions. (CVE-2018-17097, bsc#1108632)
+  * Automake: unset ACLOCAL in bootstrap script to avoid error in case 
+    earlier build script has set it
+
 -------------------------------------------------------------------
 Mon Oct 29 09:31:51 UTC 2018 - Marketa Calabkova <mcalabkova@suse.com>
 
diff --git a/soundtouch.spec b/soundtouch.spec
index 16459e6..6b270fb 100644
--- a/soundtouch.spec
+++ b/soundtouch.spec
@@ -18,7 +18,7 @@
 
 %define sover 1
 Name:           soundtouch
-Version:        2.1.0
+Version:        2.1.2
 Release:        0
 Summary:        Audio Processing Library
 License:        LGPL-2.1-or-later