diff --git a/.gitignore b/.gitignore
index 76a59be..360e96f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -28,3 +28,4 @@ varnish-2.1.3.tar.gz
 /varnish-5.1.2.tar.gz
 /varnish-5.1.3.tar.gz
 /varnish-5.2.0.tgz
+/varnish-5.2.1.tgz
diff --git a/sources b/sources
index 6a64ae2..93b89fa 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (varnish-5.2.0.tgz) = a962846492356efedaa9b2e5076b9f2423a88ed33dfd11fdeb7690d5622c3d73c782a48cbafdf919b7fca7d37b5b9f4f1243ac925e010ccbc086ae12e87c5627
+SHA512 (varnish-5.2.1.tgz) = 2e979983c7f2325e289768752cc474dc3032c3420de65ccfd5871098c076aecf18e962b04308ecb1860f542fd6f6418dc79220fdd6cf4a75f7476a733faa589c
 SHA512 (pkg-varnish-cache-5b97619.tar.gz) = 2577a320f6a569b4c07363d6be8a88e8a3a4d50e98f59e80aea302cb2026b9bc329812a720f096899ae77d568a3d775a55b2fed134cb3e54c7261466cdd730e8
diff --git a/varnish.spec b/varnish.spec
index 728e25f..d71e021 100644
--- a/varnish.spec
+++ b/varnish.spec
@@ -16,8 +16,8 @@
 
 Summary: High-performance HTTP accelerator
 Name: varnish
-Version: 5.2.0
-Release: 2%{?v_rc}%{?dist}
+Version: 5.2.1
+Release: 1%{?v_rc}%{?dist}
 License: BSD
 Group: System Environment/Daemons
 URL: http://www.varnish-cache.org/
@@ -400,6 +400,10 @@ fi
 %endif
 
 %changelog
+* Wed Nov 15 2017 Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.2.1-1
+- New upstream release. A security release
+  Includes fix for CVE-2017-8807, closes 1512798
+
 * Mon Oct 23 2017 Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.2.0-2
 - Use ix86 macro for all ifarch matches of 32bit x86 hardware
 - Added Makefile hack for el6 also to libvarnishapi