diff --git a/.gitignore b/.gitignore
index 740bd79..2f3b2ed 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,3 +4,4 @@ clog
 /wordpress-4.9.4-strip.tar.xz
 /wordpress-4.9.5-strip.tar.xz
 /wordpress-4.9.6-strip.tar.xz
+/wordpress-4.9.7-strip.tar.xz
diff --git a/sources b/sources
index 386fadf..80c0c84 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (wordpress-4.9.6-strip.tar.xz) = 9364c6b9fa4a8872bdb1bd2fba7185d6253d83b61aa7665ab94fd0016f5c1059ab41af3001fe54ce7d7354f0ac49d79b3278bad3c2f54fb7d52543cb07c18538
+SHA512 (wordpress-4.9.7-strip.tar.xz) = e46e300649c4d633d9d12d45a4c1d7d634d1f17f38c11084953464040427adcce6ced0aa2062da060f6033ce8b0c34db2698ebc910fe6191b6992ef46767d8c1
diff --git a/wordpress.spec b/wordpress.spec
index dbf4e33..983d531 100644
--- a/wordpress.spec
+++ b/wordpress.spec
@@ -19,7 +19,7 @@
 Summary:    Blog tool and publishing platform
 URL:        http://www.wordpress.org
 Name:       wordpress
-Version:    4.9.6
+Version:    4.9.7
 Group:      Applications/Publishing
 Release:    1%{?dist}
 License:    GPLv2
@@ -276,6 +276,10 @@ find ${RPM_BUILD_ROOT} \( -name \*.dolly -o -name \*.rhbz522897 -o -name \*.orig
 
 
 %changelog
+* Thu Jul 05 2018 Kevin Fenzi <kevin@scrye.com> - 4.9.7-1
+- Update to 4.9.7 security update. Fixes bug #1598612
+- Fixes CVE-2018-12895 bugs #1595584 and #1595585
+
 * Fri May 18 2018 Kevin Fenzi <kevin@scrye.com> - 4.9.6-1
 - Update to 4.9.6. Fixes bug #1579584