diff --git a/.gitignore b/.gitignore
index 802994e..fe44f1a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -201,3 +201,5 @@ samba-3.6.0pre1.tar.gz
 /samba-4.12.0.tar.asc
 /samba-4.12.1.tar.xz
 /samba-4.12.1.tar.asc
+/samba-4.12.2.tar.xz
+/samba-4.12.2.tar.asc
diff --git a/samba.spec b/samba.spec
index 45731d1..e77f9b0 100644
--- a/samba.spec
+++ b/samba.spec
@@ -8,13 +8,13 @@
 
 %define samba_requires_eq()  %(LC_ALL="C" echo '%*' | xargs -r rpm -q --qf 'Requires: %%{name} = %%{epoch}:%%{version}\\n' | sed -e 's/ (none):/ /' -e 's/ 0:/ /' | grep -v "is not")
 
-%define main_release 1
+%define main_release 0
 
-%define samba_version 4.12.1
+%define samba_version 4.12.2
 %define talloc_version 2.3.1
 %define tdb_version 1.4.3
 %define tevent_version 0.10.2
-%define ldb_version 2.1.1
+%define ldb_version 2.1.2
 # This should be rc1 or nil
 %define pre_release %nil
 
@@ -2299,6 +2299,7 @@ fi
 %{python3_sitearch}/samba/tests/__pycache__/hostconfig.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/join.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/krb5_credentials.*.pyc
+%{python3_sitearch}/samba/tests/__pycache__/ldap_raw.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/ldap_referrals.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/loadparm.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/libsmb.*.pyc
@@ -2484,6 +2485,7 @@ fi
 %{python3_sitearch}/samba/tests/kcc/kcc_utils.py
 %{python3_sitearch}/samba/tests/kcc/ldif_import_export.py
 %{python3_sitearch}/samba/tests/krb5_credentials.py
+%{python3_sitearch}/samba/tests/ldap_raw.py
 %{python3_sitearch}/samba/tests/ldap_referrals.py
 %{python3_sitearch}/samba/tests/libsmb.py
 %{python3_sitearch}/samba/tests/loadparm.py
@@ -3560,6 +3562,11 @@ fi
 %endif
 
 %changelog
+* Tue Apr 28 2020 Guenther Deschner <gdeschner@redhat.com> - 4.12.2-0
+- Update to Samba 4.12.2
+- resolves: #1825731, #1828870 - Security fixes for CVE-2020-10700
+- resolves: #1825734, #1828872 - Security fixes for CVE-2020-10704
+
 * Sun Apr 12 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.12.1-1
 - Revert POSIX stat tuning in libsmbclient
 - Resolves: rhbz#1801442
diff --git a/sources b/sources
index 15a3c5c..ada3fb2 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (samba-4.12.1.tar.xz) = 46b68312cd0b390ccb0644cc48a551c5edcd336fcb4ca9fea7602466f3127b6238037a3372933427739c927bfa96816c6c70d96627cce740bd98f4c6ba984a2d
-SHA512 (samba-4.12.1.tar.asc) = a2abe3445ee2eb9b2b5a97fad89b0cf59d31d8e90a008584e14e6a8d63c28e7f7c15644c9ebd67b535c80ec5849ea5770ba078c437ff20ba3b5773f90e20eed6
+SHA512 (samba-4.12.2.tar.xz) = ab89b8f6f0c14b5e8712bf281f7f2cc8e3dae6a69147a826bb58538ed5a22457f4d9a1ec500cbd49da42a5918fe2dd1f2726bb9a7838d9ee5507424ecf75774b
+SHA512 (samba-4.12.2.tar.asc) = b585cc5e919405a0910f1aea303959e92e293645296654805c65f20b92bd58098fc08be82ae17a9a281e04339f6af5579658f1b5c768498c75127c9dc254cd3d