diff --git a/nbdkit.spec b/nbdkit.spec
index f4515f8..79d1f37 100644
--- a/nbdkit.spec
+++ b/nbdkit.spec
@@ -27,7 +27,7 @@
 %global source_directory 1.15-development
 
 Name:           nbdkit
-Version:        1.15.2
+Version:        1.15.3
 Release:        1%{?dist}
 Summary:        NBD server
 
@@ -895,6 +895,7 @@ make %{?_smp_mflags} check || {
 %{_includedir}/nbdkit-filter.h
 %{_includedir}/nbdkit-plugin.h
 %{_includedir}/nbdkit-version.h
+%{_includedir}/nbd-protocol.h
 %{_mandir}/man3/nbdkit-filter.3*
 %{_mandir}/man3/nbdkit-plugin.3*
 %{_libdir}/pkgconfig/nbdkit.pc
@@ -907,6 +908,10 @@ make %{?_smp_mflags} check || {
 
 
 %changelog
+* Wed Sep 25 2019 Richard W.M. Jones <rjones@redhat.com> - 1.15.3-1
+- New upstream release 1.15.3.
+- Add new header file nbd-protocol.h to devel subpackage.
+
 * Fri Sep 20 2019 Richard W.M. Jones <rjones@redhat.com> - 1.15.2-1
 - New upstream version 1.15.2.
 - Fixes second Denial of Service attack:
diff --git a/sources b/sources
index 88e2d9c..f83057b 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (nbdkit-1.15.2.tar.gz) = e80e83b133d07782652c83e5c31d5a6ec4dd7b0aac574d9da5764313ef9e05921e3540227049a880f9160b5401c33b1c10851e19cf9e5475550343780544595a
-SHA512 (nbdkit-1.15.2.tar.gz.sig) = 48aafc2e09ebb13f386eb990e8b1a89203aee9f87a61a2a162771038e026f192b396a7db5f9db4a47b5ba8149c59a9e7b8186fd3feb1a32019a47e6052f99ad8
+SHA512 (nbdkit-1.15.3.tar.gz) = ae91bf86af132318c3cf188b7261b66060fa42a9f8bafb9ffd6698466ea7d09e12a5936d0c62e549b65356dd88fc5f3c8ea6dbbc65b362aa1cf92c803a1fdfea
+SHA512 (nbdkit-1.15.3.tar.gz.sig) = da8566bd4f6054886ebc1626b9cd1cb2e4ec19b19d0e10fe521436dbf8e711dec574f51dc592eadbb91f256b49047a5813d7c265f9f0c633fd356295b43d1b69