diff --git a/gstreamer-plugins-bad-free.spec b/gstreamer-plugins-bad-free.spec
index 4e747c8..4a64472 100644
--- a/gstreamer-plugins-bad-free.spec
+++ b/gstreamer-plugins-bad-free.spec
@@ -14,7 +14,7 @@
 Summary: GStreamer streaming media framework "bad" plug-ins
 Name: gstreamer-plugins-bad-free
 Version: 0.10.23
-Release: 35%{?dist}
+Release: 36%{?dist}
 # The freeze and nfs plugins are LGPLv2 (only)
 License: LGPLv2+ and LGPLv2
 Group: Applications/Multimedia
@@ -177,7 +177,7 @@ sed -i 's/opencv <= 2.3.1/opencv <= 2.4.3/g' configure
     --disable-divx --disable-dts --disable-faac --disable-faad --disable-nas \
     --disable-mimic --disable-libmms --disable-mpeg2enc --disable-mplex \
     --disable-neon --disable-openal --disable-rtmp --disable-xvid \
-    --disable-gme --disable-voamrwbenc
+    --disable-gme --disable-voamrwbenc --disable-nsf
 make %{?_smp_mflags}
 
 
@@ -253,7 +253,6 @@ rm $RPM_BUILD_ROOT%{_libdir}/*.la
 %{_libdir}/gstreamer-%{majorminor}/libgstmpegvideoparse.so
 %{_libdir}/gstreamer-%{majorminor}/libgstmve.so
 %{_libdir}/gstreamer-%{majorminor}/libgstmxf.so
-%{_libdir}/gstreamer-%{majorminor}/libgstnsf.so
 %{_libdir}/gstreamer-%{majorminor}/libgstnuvdemux.so
 %{_libdir}/gstreamer-%{majorminor}/libgstpatchdetect.so
 %{_libdir}/gstreamer-%{majorminor}/libgstpcapparse.so
@@ -361,6 +360,9 @@ rm $RPM_BUILD_ROOT%{_libdir}/*.la
 
 
 %changelog
+* Wed Nov 30 2016 Wim Taymans <wtaymans@redhat.com> - 0.10.23-36
+- Remove insecure nsf plugin (#1395126)
+
 * Thu Oct 06 2016 Igor Gnatenko <ignatenko@redhat.com> - 0.10.23-35
 - rebuild for libtimidity 0.2.x