diff --git a/.gitignore b/.gitignore
index 1462ea8..7564a8b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -20,3 +20,4 @@
 /v2.4.9.4.tar.gz
 /v2.4.11.1.tar.gz
 /v2.4.11.2.tar.gz
+/v2.4.12.2.tar.gz
diff --git a/mod_auth_openidc.spec b/mod_auth_openidc.spec
index a32f17f..5177a24 100644
--- a/mod_auth_openidc.spec
+++ b/mod_auth_openidc.spec
@@ -14,8 +14,8 @@
 %global httpd_pkg_cache_dir /var/cache/httpd/mod_auth_openidc
 
 Name:		mod_auth_openidc
-Version:	2.4.11.2
-Release:	3%{?dist}
+Version:	2.4.12.2
+Release:	1%{?dist}
 Summary:	OpenID Connect auth module for Apache HTTP Server
 
 License:	ASL 2.0
@@ -96,6 +96,11 @@ install -m 700 -d $RPM_BUILD_ROOT%{httpd_pkg_cache_dir}/cache
 %dir %attr(0700, apache, apache) %{httpd_pkg_cache_dir}/cache
 
 %changelog
+* Fri Dec 16 2022 Tomas Halman <thalman@redhat.com> - 2.4.12.2-1
+  Rebase to 2.4.12.2 version
+- Resolves: rhbz#2153658 - CVE-2022-23527 mod_auth_openidc: Open Redirect in
+  oidc_validate_redirect_url() using tab character
+
 * Thu Sep 22 2022 Tomas Halman <thalman@redhat.com> - 2.4.11.2-3
 - Resolves: rhbz#2128328 - Port pcre dependency to pcre2
 
diff --git a/sources b/sources
index 83a63ec..c49d15b 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (v2.4.11.2.tar.gz) = 0e66bd60306ba063be84bdb8a2decfceb1f41df7742e0792822929a69162a8f57473343db4c051d15fa9e6265de6f3c42f47ad5b9bb452e2c150527bb78b9ff6
+SHA512 (v2.4.12.2.tar.gz) = 8e341555453a4c53d577f52088b13d874bfe54d1da33f6543202524d68b723f5743968376814b12f3f53f6c5f58e928d20885e6f64b67b83e90f85b13a78bfa2