diff --git a/.gitignore b/.gitignore
index d32fae6..d007eb8 100644
--- a/.gitignore
+++ b/.gitignore
@@ -5,3 +5,4 @@ wildmidi-0.2.2.tar.gz
 /0.3.7.tar.gz
 /wildmidi-0.3.7.tar.gz
 /wildmidi-0.3.8.tar.gz
+/wildmidi-0.3.15.tar.gz
diff --git a/sources b/sources
index 4eaec67..f83673d 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-76fe5ae639d2c4288435d2e4ac577e77  wildmidi-0.3.8.tar.gz
+SHA512 (wildmidi-0.3.15.tar.gz) = 4d95665e9ae8b8293589e81f02e0db88b7e9e3ce30c404270f4e91438b17dddc36c5ee93cb0ab90020305aa283e6b5d86175ee756d8dc66f6ed933cd0a0baa37
diff --git a/wildmidi.spec b/wildmidi.spec
index 5f01644..e513b5f 100644
--- a/wildmidi.spec
+++ b/wildmidi.spec
@@ -1,6 +1,6 @@
 Name:           wildmidi
-Version:        0.3.8
-Release:        2%{?dist}
+Version:        0.3.15
+Release:        1%{?dist}
 Summary:        Softsynth midi player
 Group:          Applications/Multimedia
 License:        GPLv3+
@@ -75,6 +75,13 @@ ln -s ../timidity.cfg $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/%{name}.cfg
 
 
 %changelog
+* Fri Nov 30 2018 Karel Volný <kvolny@redhat.com> - 0.3.15-1
+- New upstream release 0.3.15
+- Fixes CVE-2017-11661, CVE-2017-11662, CVE-2017-11663, CVE-2017-11664 (rhbz#1479316)
+
+* Thu Jan 28 2016 Karel Volný <kvolny@redhat.com> - 0.3.8-3
+- Import to EPEL to satisfy QMMP dependency (rhbz#1242361#c3)
+
 * Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.3.8-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild