diff --git a/.gitignore b/.gitignore
index 4af95f5..7e2d8e9 100644
--- a/.gitignore
+++ b/.gitignore
@@ -54,3 +54,5 @@
 /libreswan-4.10.tar.gz
 /libreswan-4.11.tar.gz
 /libreswan-4.11.tar.gz.asc
+/libreswan-4.12.tar.gz
+/libreswan-4.12.tar.gz.asc
diff --git a/libreswan.spec b/libreswan.spec
index f3625d5..caa2e1c 100644
--- a/libreswan.spec
+++ b/libreswan.spec
@@ -30,8 +30,8 @@
 Name: libreswan
 Summary: Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec
 # version is generated in the release script
-Version: 4.11
-Release: %{?prever:0.}1%{?prever:.%{prever}}%{?dist}.1
+Version: 4.12
+Release: %{?prever:0.}1%{?prever:.%{prever}}%{?dist}
 License: GPLv2
 Url: https://libreswan.org/
 Source0: https://download.libreswan.org/%{?prever:development/}%{name}-%{version}%{?prever}.tar.gz
@@ -207,6 +207,10 @@ certutil -N -d sql:$tmpdir --empty-password
 %doc %{_mandir}/*/*
 
 %changelog
+* Fri Aug 11 2023 Paul Wouters <paul.wouters@aiven.io - 4.12-1
+- Update to 4.12 for CVE-2023-38710, CVE-2023-38711 and CVE-2023-38712
+- Resolves: rhbz#2230225 libreswan-4.12 is available
+
 * Thu Jul 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 4.11-1.1
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
 
diff --git a/sources b/sources
index 552f7e7..931f74f 100644
--- a/sources
+++ b/sources
@@ -1,5 +1,5 @@
+SHA512 (libreswan-4.12.tar.gz) = 3a7f5ea5d97da357a8979a8807694a316d42ccc5f9c7b5867041abf2b9316ff8428f24cf307b6b6073c191896c0417f137abf78f9903aecde5e1ee1182577ce0
+SHA512 (libreswan-4.12.tar.gz.asc) = 6bf5cb3920442f53eaca6db2f4ca5d852f985efdbbe2243b8bbede180f7fbe1b4c4815c401faffd87f004d9a33b24e7377c177485140af21bedbd6d3e76f4a2d
 SHA512 (ikev1_dsa.fax.bz2) = 627cbac14248bd68e8d22fbca247668a7749ef0c2e41df8d776d62df9a21403d3a246c0bd82c3faedce62de90b9f91a87f753e17b056319000bba7d2038461ac
 SHA512 (ikev1_psk.fax.bz2) = 1b2daec32edc56b410c036db2688c92548a9bd9914994bc7e555b301dd6db4497a6b3e89dc12ddf36826ae90b40fcde501a5a45c0d59098e07839073d219d467
 SHA512 (ikev2.fax.bz2) = 65c65d86fd1a7539c0ad516b0f49546d5722b710225857ee2d2f5f3415ac7d023264746398f3637fd248a4ce2364957c516c31214ee33faefe58ac8e4e333a10
-SHA512 (libreswan-4.11.tar.gz) = 2a9219d6300dccb5ce0cb8cd97210262cd88cb14bd3fd653f65f5231e1d67d030ddeba9bcb4e10fff1ae635e90aff32e8059c7220c026499b151b0d4031d873c
-SHA512 (libreswan-4.11.tar.gz.asc) = 44345fd0d9dd7df13cc45d7d777c4a0b4fcf5f6aef544e2d310bee809a9d48484295028b547d368e72eb703da14f6c479c7a0fb66ef51c2590627274f2dd0645