diff --git a/sources b/sources
index cadf4d7..0f57160 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (squid-5.1.tar.xz) = 55792ab268e360132336f074b1e674a11931bf2f89745775aa047d85bfc4fd7bd9c97e9d1358a46e599def1173fefa4f1886dd3f0ba35e6c80da5241cf5bf581
-SHA512 (squid-5.1.tar.xz.asc) = cb1b7ca9a29ccecc7bdf39433f448a8e6022ae3610110653c16e57c642bd8c415ad4ad78c8d6e09a93ebb4787725b6ea147a865dcb27f840dd7af0af61195f07
+SHA512 (squid-5.2.tar.xz) = 0e5d57baf50a9a35ac4b28fee86d736311c7736ee460de8a7e739534aa4b24f8697836797c33da5c4899763672275af03ffabf4f811c7b833ba569e977c1a7e5
+SHA512 (squid-5.2.tar.xz.asc) = 0af0c51186b0533fd2670b62111438ca5d8de33343996fd254129ad1bf96ff8c0f9dfeeaefa1426bcd9802ae0b5503785cdfe7c1dc185224a2234d4fcf8c67b3
 SHA512 (pgp.asc) = 09f7012030d68831dfc083d67ca63ee54ed851482ca8d0e9505b444ee3e7ddeed62369b53f2917c9b2e0e57cc0533fce46e8cafd2ebcd1c6cb186b516efd0ad2
diff --git a/squid.spec b/squid.spec
index dec81a3..02c62df 100644
--- a/squid.spec
+++ b/squid.spec
@@ -1,8 +1,8 @@
 %define __perl_requires %{SOURCE98}
 
 Name:     squid
-Version:  5.1
-Release:  2%{?dist}
+Version:  5.2
+Release:  1%{?dist}
 Summary:  The Squid proxy caching server
 Epoch:    7
 # See CREDITS for breakdown of non GPLv2+ code
@@ -35,6 +35,10 @@ Patch204: squid-3.5.9-include-guards.patch
 # revert this upstream patch - https://bugzilla.redhat.com/show_bug.cgi?id=1936422
 # workaround for #1934919
 Patch205: squid-5.0.5-symlink-lang-err.patch
+# fix openssl3 build failures
+Patch206: squid-5.2-openssl3.patch
+# fix -lto build failure
+Patch207: squid-5.2-test-store-cppsuite.patch
 
 # cache_swap.sh
 Requires: bash gawk
@@ -105,15 +109,14 @@ lookup program (dnsserver), a program for retrieving FTP data
 %patch203 -p1 -b .perlpath
 %patch204 -p0 -b .include-guards
 %patch205 -p1 -R -b .symlink-lang-err
+%patch206 -p1 -b .openssl3
+%patch207 -p1 -b .flto
 
 # https://bugzilla.redhat.com/show_bug.cgi?id=1679526
 # Patch in the vendor documentation and used different location for documentation
 sed -i 's|@SYSCONFDIR@/squid.conf.documented|%{_pkgdocdir}/squid.conf.documented|' src/squid.8.in
 
 %build
-# This package fails its testsuite when LTO is enabled.  This needs further
-# investigation
-%define _lto_cflags %{nil}
 
 # NIS helper has been removed because of the following bug
 # https://bugzilla.redhat.com/show_bug.cgi?id=1531540
@@ -339,6 +342,10 @@ fi
 
 
 %changelog
+* Tue Oct 05 2021 Luboš Uhliarik <luhliari@redhat.com> - 7:5.2-1
+- new version 5.2 (#2010109)
+- Resolves: #1934559 - squid: out-of-bounds read in WCCP protocol
+
 * Tue Sep 14 2021 Sahana Prasad <sahana@redhat.com> - 7:5.1-2
 - Rebuilt with OpenSSL 3.0.0