diff --git a/CHANGELOG.md b/CHANGELOG.md
index f1fd0a93..1bb3468d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,9 @@
 - Added decoding of ISM band transmissions using rtl_433
 - Added IPv6 support
 
+**1.2.2**
+- Fixed an over-the-air code injection vulnerability
+
 **1.2.1**
 - FifiSDR support fixed (pipeline formats now line up correctly)
 - Added "Device" input for FifiSDR devices for sound card selection
diff --git a/debian/changelog b/debian/changelog
index 12ae6931..b40d25f4 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -9,6 +9,12 @@ openwebrx (1.3.0) UNRELEASED; urgency=low
 
  -- Jakob Ketterl <jakob.ketterl@gmx.de>  Fri, 30 Sep 2022 16:47:00 +0000
 
+openwebrx (1.2.2) bullseye jammy; urgency=high
+
+  * - Fixed an over-the-air code injection vulnerability
+
+ -- Jakob Ketterl <jakob.ketterl@gmx.de>  Sun, 08 Oct 2023 21:29:00 +0000
+
 openwebrx (1.2.1) bullseye jammy; urgency=low
 
   * FifiSDR support fixed (pipeline formats now line up correctly)