diff --git a/knot-resolver.spec b/knot-resolver.spec
index fbfdd29..c8477bf 100644
--- a/knot-resolver.spec
+++ b/knot-resolver.spec
@@ -2,7 +2,7 @@
 %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}}
 
 %define GPG_CHECK 1
-%define VERSION 5.1.1
+%define VERSION 5.1.2
 %define repodir %{_builddir}/%{name}-%{version}
 %define NINJA ninja-build
 
@@ -11,7 +11,7 @@ Version:        %{VERSION}
 Release:        1%{?dist}
 Summary:        Caching full DNS Resolver
 
-License:        GPLv3
+License:        GPL-3.0-or-later
 URL:            https://www.knot-resolver.cz/
 Source0:        https://secure.nic.cz/files/%{name}/%{name}-%{version}.tar.xz
 
@@ -336,6 +336,9 @@ fi
 %endif
 
 %changelog
+* Wed Jul 01 2020 Tomas Krizek <tomas.krizek@nic.cz> - 5.1.2-1
+- update to upstream version 5.1.2
+
 * Tue May 19 2020 Tomas Krizek <tomas.krizek@nic.cz> - 5.1.1-1
 - update to upstream version 5.1.1 (fixes CVE-2020-12667)
 
diff --git a/sources b/sources
index c286576..851d55e 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (knot-resolver-5.1.1.tar.xz) = c58bacac4fd2cc38015834309ef619edc22e04e198c1fdf900ff538431c83d2087ff61283068052a0038c6a1b325e551da9f5dc68f762a9a1f6f02ae579ad136
-SHA512 (knot-resolver-5.1.1.tar.xz.asc) = 61b2a093e42c3142639400e7384ce78c39dcd94613d4c6b16c07ac0c75932f005a5ff9f0a4e6dcdac6a84e327e351c53c65d7d717c3fb9ebde476e0b8663ac50
+SHA512 (knot-resolver-5.1.2.tar.xz) = 75e08b4709cd9cdd21ce8c116c7e232ed250b70b59716b5b33237f88cb615bfca05824726faf3d792d27ef8d81df7d8a7109de92e1d6988bba960c2eab9175d3
+SHA512 (knot-resolver-5.1.2.tar.xz.asc) = db9e7f7f2174498c3e574aae063a1fae783146738260181e21223b684d2e60edb8d10e92710d291fe9aad4c3771bbd861e501f42d852ff99d26a8e0368faba6c