diff --git a/.gitignore b/.gitignore
index 5188c6f..f724c4c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -14,3 +14,4 @@
 /mbedtls-2.8.0-apache.tgz
 /mbedtls-2.9.0-apache.tgz
 /mbedtls-2.11.0-apache.tgz
+/mbedtls-2.12.0-apache.tgz
diff --git a/mbedtls.spec b/mbedtls.spec
index c7a87e3..9d7eb8a 100644
--- a/mbedtls.spec
+++ b/mbedtls.spec
@@ -3,8 +3,8 @@
 %endif
 
 Name: mbedtls
-Version: 2.11.0
-Release: 3%{?dist}
+Version: 2.12.0
+Release: 1%{?dist}
 Summary: Light-weight cryptographic and SSL/TLS library
 Group: System Environment/Libraries
 License: ASL 2.0
@@ -129,6 +129,11 @@ LD_LIBRARY_PATH=$PWD/library ctest --output-on-failure -V
 %doc apidoc/*
 
 %changelog
+%changelog
+* Fri Jul 27 2018 Morten Stevens <mstevens@fedoraproject.org> - 2.12.0-1
+- Update to 2.12.0
+- Security Advisory 2018-02 (CVE-2018-0497)
+
 * Mon Jul 16 2018 Morten Stevens <mstevens@fedoraproject.org> - 2.11.0-3
 - BuildRequire gcc-c++ (https://fedoraproject.org/wiki/Packaging:C_and_C%2B%2B)
 
diff --git a/sources b/sources
index 454b88d..bd3b5e7 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (mbedtls-2.11.0-apache.tgz) = 602c95b48ae36fbe728582d356dc6b9fc2cbd04befd3b5edeae3bb483ca1bf7092a96019c75e2aacb2d7a9e0716855d5de76a9b6340f76eaf2551fb275893835
+SHA512 (mbedtls-2.12.0-apache.tgz) = 4b6387c6040d4a5f8792d5a7e3ee32036a4f619d2506f0af965be3d7d32176c5eec14df894befc8cd875ddab4e0d6b75486a8d893f155e9c965ec9d1304e346f