diff --git a/.gitignore b/.gitignore
index dfc8167..ef9953a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -12,3 +12,4 @@
 /colord-0.1.12.tar.xz
 /colord-0.1.13.tar.xz
 /colord-0.1.14.tar.xz
+/colord-0.1.15.tar.xz
diff --git a/colord.spec b/colord.spec
index b661c03..87babd5 100644
--- a/colord.spec
+++ b/colord.spec
@@ -1,6 +1,6 @@
 Summary:   Color daemon
 Name:      colord
-Version:   0.1.14
+Version:   0.1.15
 Release:   1%{?dist}
 License:   GPLv2+ and LGPLv2+
 URL:       http://www.freedesktop.org/software/colord/
@@ -19,7 +19,10 @@ BuildRequires: sane-backends-devel
 BuildRequires: sqlite-devel
 BuildRequires: gobject-introspection-devel
 BuildRequires: vala-tools
+BuildRequires: libgusb-devel
+
 Requires: shared-color-profiles
+Requires: color-filesystem
 
 %description
 colord is a low level system activated daemon that maps color devices
@@ -90,6 +93,12 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/lib/colord/storage.db
 %{_datadir}/vala/vapi/*.vapi
 
 %changelog
+* Sat Nov 26 2011 Richard Hughes <richard@hughsie.com> 0.1.15-1
+- New upstream version
+- This release fixes an important security bug: CVE-2011-4349.
+- Do not crash the daemon if adding the device to the db failed
+- Fix a memory leak when getting properties from a device
+
 * Tue Nov 01 2011 Richard Hughes <richard@hughsie.com> 0.1.14-1
 - New upstream version
 - Remove upstreamed patches
diff --git a/sources b/sources
index b1bef7b..c484e30 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-b230ba65a3834d1ee67085d62aa81a16  colord-0.1.14.tar.xz
+f212cbc7eece3fa403c1507fc8b10dbb  colord-0.1.15.tar.xz