diff --git a/.gitignore b/.gitignore
index 10c61ff..4123fef 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,3 +3,4 @@ yasm-1.1.0.tar.gz
 /yasm-1.2.0.tar.gz
 /yasm-1.3.0.tar.gz
 /yasm-9defefa.tar.gz
+/yasm-121ab15.tar.gz
diff --git a/sources b/sources
index 65b1964..3f7a801 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (yasm-9defefa.tar.gz) = 327de3ecaa4aa91bb418aab146fae5d82b478c33f701b7534df3e5f4d490914dd16774874cb5191192532961ed885cc4b942b232e3014306029155571016eeec
+SHA512 (yasm-121ab15.tar.gz) = e005153fc14b2131c828848a4026ad7f7982ac611bc0848c6cf2cb4fdeeed91efcffde9b4a6dc4e968f32afff4517620b5157b1cefe418366200bcb05e839b81
diff --git a/yasm.spec b/yasm.spec
index 4c76532..23e9f6b 100644
--- a/yasm.spec
+++ b/yasm.spec
@@ -1,12 +1,12 @@
 %global git 1
-%global commit 9defefae9fbcb6958cddbfa778c1ea8605da8b8b
-%global date 20230922
+%global commit 121ab150b3577b666c79a79f4a511798d7ad2432
+%global date 20250625
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 Summary: Modular Assembler
 Name: yasm
 Version: 1.3.0^%{date}git%{shortcommit}
-Release: 2%{?dist}
+Release: 1%{?dist}
 # See COPYING for the detail, there is quite a lot!
 # Bitvect is (GPL-1.0-or-later AND GPL-2.0-or-later OR Artistic-1.0-Perl OR LGPL-2.0-or-later
 # Everything else is BSD. Either 2 or 3 clause.
@@ -100,6 +100,10 @@ make check
 
 
 %changelog
+* Sat Feb 15 2025 Dominik Mierzejewski <dominik@greysector.net> - 1.3.0^20250625git121ab15-1
+- update to git 121ab15
+- fixes CVE-2024-22653 (resolves rhbz#2369457)
+
 * Sat Jul 20 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.0^20230922git9defefa-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild