diff --git a/CHANGELOG.md b/CHANGELOG.md
index 19dd2d27..518db005 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,6 @@
+**1.2.2**
+- Fixed an over-the-air code injection vulnerability
+
 **1.2.1**
 - FifiSDR support fixed (pipeline formats now line up correctly)
 - Added "Device" input for FifiSDR devices for sound card selection
diff --git a/debian/changelog b/debian/changelog
index 57ddc0d2..599805bd 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+openwebrx (1.2.2) bullseye jammy; urgency=high
+
+  * - Fixed an over-the-air code injection vulnerability
+
+ -- Jakob Ketterl <jakob.ketterl@gmx.de>  Sun, 08 Oct 2023 21:29:00 +0000
+
 openwebrx (1.2.1) bullseye jammy; urgency=low
 
   * FifiSDR support fixed (pipeline formats now line up correctly)
diff --git a/owrx/version.py b/owrx/version.py
index 063c62fc..fd776845 100644
--- a/owrx/version.py
+++ b/owrx/version.py
@@ -1,5 +1,5 @@
 from distutils.version import LooseVersion
 
-_versionstring = "1.2.1"
+_versionstring = "1.2.2"
 looseversion = LooseVersion(_versionstring)
 openwebrx_version = "v{0}".format(looseversion)