diff --git a/.gitignore b/.gitignore
index ea90a01..d36cc6b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1,2 @@
 xmlsec1-1.2.16.tar.gz
+/xmlsec1-1.2.17.tar.gz
diff --git a/sources b/sources
index 0ef5a8d..a4c3335 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-17e8eb9a4ec4139b7689d139be4da133  xmlsec1-1.2.16.tar.gz
+d37daeccb841e5a457b9476d613a6012  xmlsec1-1.2.17.tar.gz
diff --git a/xmlsec1.spec b/xmlsec1.spec
index 1bcdf59..c7286f1 100644
--- a/xmlsec1.spec
+++ b/xmlsec1.spec
@@ -1,7 +1,7 @@
 Summary: Library providing support for "XML Signature" and "XML Encryption" standards
 Name: xmlsec1
-Version: 1.2.16
-Release: 4%{?dist}%{?extra_release}
+Version: 1.2.17
+Release: 1%{?dist}%{?extra_release}
 License: MIT
 Group: Development/Libraries
 Source0: http://www.aleksey.com/xmlsec/download/xmlsec1-%{version}.tar.gz
@@ -210,6 +210,10 @@ rm -fr %{buildroot}
 %{_libdir}/pkgconfig/xmlsec1-nss.pc
 
 %changelog
+* Mon Apr 11 2011 Daniel Veillard <veillard@redhat.com> - 1.2.17-1
+- Update to upstream release 1.2.17
+- fixes CVE-2011-1425 on xslt file creation
+
 * Tue Mar 22 2011 Daniel Veillard <veillard@redhat.com> - 1.2.16-4
 - Fix missing links to unversioned shared library files 541599