diff --git a/0001-Fix-oversights-in-the-0.12.9-release.patch b/0001-Fix-oversights-in-the-0.12.9-release.patch
new file mode 100644
index 0000000..2388bb2
--- /dev/null
+++ b/0001-Fix-oversights-in-the-0.12.9-release.patch
@@ -0,0 +1,46 @@
+From b5c3b156e3047315a5402a659c52026bcbbe9b04 Mon Sep 17 00:00:00 2001
+From: John Evans <john.g.evans.ne@gmail.com>
+Date: Sun, 26 Nov 2023 15:32:17 -0700
+Subject: [PATCH] Fix oversights in the 0.12.9 release
+MIME-Version: 1.0
+Content-Type: text/plain; charset=UTF-8
+Content-Transfer-Encoding: 8bit
+
+Upstream released these fixes as 0.12.9post1, but we are able to avoid
+the need for “post” versioning by backporting them.
+---
+ docs/source/whatsnew/0.12.rst | 5 +++++
+ setup.cfg                     | 2 +-
+ 2 files changed, 6 insertions(+), 1 deletion(-)
+
+diff --git a/docs/source/whatsnew/0.12.rst b/docs/source/whatsnew/0.12.rst
+index 2258695..5046f9e 100644
+--- a/docs/source/whatsnew/0.12.rst
++++ b/docs/source/whatsnew/0.12.rst
+@@ -2,6 +2,11 @@
+ Changes in glymur 0.12
+ ######################
+ 
++*****************
++Changes in 0.12.9
++*****************
++    * Fix handling of XML data with trailing null bytes
++
+ *****************
+ Changes in 0.12.8
+ *****************
+diff --git a/setup.cfg b/setup.cfg
+index 138c739..b49ef60 100644
+--- a/setup.cfg
++++ b/setup.cfg
+@@ -1,6 +1,6 @@
+ [metadata]
+ name = Glymur
+-version = 0.12.8
++version = 0.12.9
+ author = 'John Evans'
+ author_email = "John Evans" <john.g.evans.ne@gmail.com>
+ license = 'MIT'
+-- 
+2.42.0
+
diff --git a/python-glymur.spec b/python-glymur.spec
index 1ade805..605e1c3 100644
--- a/python-glymur.spec
+++ b/python-glymur.spec
@@ -13,6 +13,12 @@ Source0:        https://github.com/quintusdias/glymur/archive/v%{version}/%{name
 Source1:        jp2dump.1
 Source2:        tiff2jp2.1
 
+# Partial backport of:
+# Release v0.12.9post1
+# https://github.com/quintusdias/glymur/commit/d0134123978678d33573d53a144ce1634e770e10
+# The release number remains at 0.12.9.
+Patch:          0001-Fix-oversights-in-the-0.12.9-release.patch
+
 # Since the package has had endian-dependent test failures in the past, we give
 # up “noarch” in the base package in order to run tests on all supported
 # architectures.  We can still make all the built RPMs noarch.  Since the