diff --git a/.fuse-overlayfs.metadata b/.fuse-overlayfs.metadata
index 0fd7ae1..92c7135 100644
--- a/.fuse-overlayfs.metadata
+++ b/.fuse-overlayfs.metadata
@@ -1 +1 @@
-ff9c1d10080ac5d21c2958b2b53a9575774101e6 SOURCES/v1.2.0.tar.gz
+079bcd26d90e20f33c974e29b727ff399d7a078f SOURCES/v1.3.0.tar.gz
diff --git a/.gitignore b/.gitignore
index 67e59d9..81ab3db 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/v1.2.0.tar.gz
+SOURCES/v1.3.0.tar.gz
diff --git a/SPECS/fuse-overlayfs.spec b/SPECS/fuse-overlayfs.spec
index a2f7206..dcfd0c0 100644
--- a/SPECS/fuse-overlayfs.spec
+++ b/SPECS/fuse-overlayfs.spec
@@ -3,8 +3,8 @@
 %{!?_modulesloaddir:%global _modulesloaddir %{_usr}/lib/modules-load.d}
 
 Name: fuse-overlayfs
-Version: 1.2.0
-Release: 2%{?dist}
+Version: 1.3.0
+Release: 1%{?dist}
 Summary: FUSE overlay+shiftfs implementation for rootless containers
 License: GPLv3+
 URL: %{git0}
@@ -39,6 +39,7 @@ building other packages which use import path with
 
 %build
 export CFLAGS="%{optflags} -D_GNU_SOURCE -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64"
+export LDFLAGS="-pie -Wl,-z,relro -Wl,-z,now"
 ./autogen.sh
 ./configure --prefix=%{_usr} --libdir=%{_libdir}
 %{__make} generate-man
@@ -64,6 +65,14 @@ modprobe fuse > /dev/null 2>&1 || :
 %{_modulesloaddir}/fuse-overlayfs.conf
 
 %changelog
+* Thu Nov 26 2020 Jindrich Novy <jnovy@redhat.com> - 1.3.0-1
+- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.3.0
+- Related: #1888571
+
+* Mon Nov 09 2020 Jindrich Novy <jnovy@redhat.com> - 1.2.0-3
+- be sure to harden the linked binary
+- Related: #1888571
+
 * Thu Oct 29 2020 Jindrich Novy <jnovy@redhat.com> - 1.2.0-2
 - ensure fuse module is loaded
 - Related: #1888571