diff --git a/cyrus-imapd.spec b/cyrus-imapd.spec
index 0807acf..e7a7a4f 100644
--- a/cyrus-imapd.spec
+++ b/cyrus-imapd.spec
@@ -8,7 +8,7 @@
 %bcond_without cassandane
 
 Name: cyrus-imapd
-Version: 3.0.11
+Version: 3.0.12
 Release: 1%{?dist}
 
 %define ssl_pem_file /etc/pki/%name/%name.pem
@@ -693,6 +693,9 @@ getent passwd cyrus >/dev/null || /usr/sbin/useradd -c "Cyrus IMAP Server" -d /v
 
 
 %changelog
+* Fri Nov 22 2019 Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.12-1
+- Update to 3.0.12, fixing CVE-2019-18928.
+
 * Tue Jul 30 2019 Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.11-1
 - Update to 3.0.11.
 
diff --git a/sources b/sources
index 88478ef..7d6adb6 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
 SHA512 (cassandane-testdata-20170523.tar.gz) = 705f5af6a31fe3b8d6e8027bbddbedb2f64d65997f8a06620ec07fcd30a95d98ac3f3fbef7af5080684ee21be1c5b8bcad2374b2749f0571099e780355a04420
 SHA512 (cassandane-c8040fd.tar.gz) = 58c0778be68628984f231aa1bb20abcb45a390f3660135e24bcdda163bfec2d7f5643aeb8d3f9deb03796f5b9b29a7e39515ffe375c1a2805c5ff3ec0f3c7d43
-SHA512 (cyrus-imapd-3.0.11.tar.gz) = 058efc2e462729b79e431e1b5dab1addfe737aeec8b686698cd2270748275028ca5722ed3960fcd680a0393027ee1b1d7dff65872dd1d8349a3f933e81227e48
+SHA512 (cyrus-imapd-3.0.12.tar.gz) = cef5c361dacfac6ae5e8900aa0cba705387a94c06fb176326c890ef4ab3384be121cae3e196ce1dfbd0ff01358719c5479414095d108e61a28e27420f0fde2c7