diff --git a/.gitignore b/.gitignore
index 5fae2ca..3eadad7 100644
--- a/.gitignore
+++ b/.gitignore
@@ -5,3 +5,4 @@
 /colord-0.1.5.tar.bz2
 /colord-0.1.6.tar.bz2
 /colord-0.1.7.tar.bz2
+/colord-0.1.15.tar.xz
diff --git a/colord.spec b/colord.spec
index 949e02c..1721a98 100644
--- a/colord.spec
+++ b/colord.spec
@@ -1,10 +1,10 @@
 Summary:   Color daemon
 Name:      colord
-Version:   0.1.7
+Version:   0.1.15
 Release:   1%{?dist}
 License:   GPLv2+ and LGPLv2+
-URL:       http://gitorious.org/colord
-Source0:   http://people.freedesktop.org/~hughsient/releases/%{name}-%{version}.tar.bz2
+URL:       http://www.freedesktop.org/software/colord/
+Source0:   http://www.freedesktop.org/software/colord/releases/%{name}-%{version}.tar.xz
 
 BuildRequires: dbus-devel
 BuildRequires: docbook-utils
@@ -17,6 +17,11 @@ BuildRequires: libusb1-devel
 BuildRequires: polkit-devel
 BuildRequires: sane-backends-devel
 BuildRequires: sqlite-devel
+BuildRequires: gobject-introspection-devel
+BuildRequires: vala-tools
+
+Requires: shared-color-profiles
+Requires: color-filesystem
 
 %description
 colord is a low level system activated daemon that maps color devices
@@ -39,9 +44,6 @@ Files for development with %{name}.
         --disable-examples \
         --disable-dependency-tracking
 
-sed -i 's|^hardcode_libdir_flag_spec=.*|hardcode_libdir_flag_spec=""|g' libtool
-sed -i 's|^runpath_var=LD_RUN_PATH|runpath_var=DIE_RPATH_DIE|g' libtool
-
 make %{?_smp_mflags}
 
 %install
@@ -77,15 +79,25 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/lib/colord/storage.db
 /lib/udev/rules.d/*.rules
 %dir %{_datadir}/color/icc/colord
 %{_datadir}/color/icc/colord/*.ic?
+%{_libdir}/colord-sensors
+%{_libdir}/girepository-1.0/*.typelib
 %ghost %{_localstatedir}/lib/colord/*.db
 
 %files devel
 %defattr(-,root,root,-)
-%{_includedir}/libcolord/*.h
+%{_includedir}/colord-1
 %{_libdir}/libcolord.so
 %{_libdir}/pkgconfig/colord.pc
+%{_datadir}/gir-1.0/*.gir
+%{_datadir}/vala/vapi/*.vapi
 
 %changelog
+* Sat Nov 26 2011 Richard Hughes <richard@hughsie.com> 0.1.15-1
+- New upstream version.
+- This release fixes an important security bug: CVE-2011-4349.
+- Do not crash the daemon if adding the device to the db failed
+- Fix a memory leak when getting properties from a device
+
 * Fri May 06 2011 Richard Hughes <richard@hughsie.com> 0.1.7-1
 - New upstream version.
 - Create /var/lib/colord at buildtime not runtime for SELinux
diff --git a/sources b/sources
index ccf994c..c484e30 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-ffcce20330a7aa94783145d2a36bf806  colord-0.1.7.tar.bz2
+f212cbc7eece3fa403c1507fc8b10dbb  colord-0.1.15.tar.xz