diff --git a/socat.spec b/socat.spec
index 39cd2a9..ca4091f 100644
--- a/socat.spec
+++ b/socat.spec
@@ -1,6 +1,6 @@
 Summary: Bidirectional data relay between two data channels ('netcat++')
 Name: socat
-Version: 1.7.2.0
+Version: 1.7.2.1
 Release: 1%{?dist}
 License: GPLv2
 Url:  http://www.dest-unreach.org/%{name}
@@ -36,7 +36,7 @@ export CPPFLAGS="-I%{_includedir}/readline5" LDFLAGS="-L%{_libdir}/readline5"
         --enable-listen --enable-proxy --enable-exec \
         --enable-system --enable-pty --enable-readline \
         --enable-openssl --enable-sycls --enable-filan \
-        --enable-retry --enable-libwrap --disable-fips
+        --enable-retry --enable-libwrap
 
 chmod 644 *.sh
 make %{?_smp_mflags}
@@ -62,6 +62,11 @@ rm -rf %{buildroot}
 %doc %{_mandir}/man1/socat.1*
 
 %changelog
+* Wed May 23 2012 Paul Wouters <pwouters@redhat.com> - 1.7.2.1-1
+- Updated to 1.7.2.1 for CVE-2012-0219, rhbz#821553, rhbz#821688
+- Remove patch merged upstream
+- Remove --disable-fips from configure
+
 * Sat Jan 07 2012 Paul Wouters <paul@nohats.ca> - 1.7.2.0-1
 - Upgraded to 1.7.2.0 which allows tun/tap interfaces without IP address
   and introduces options openssl-compress and max-children. 
diff --git a/sources b/sources
index 8d7ba00..8f16e0d 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-0565dd58800e4c50534c61bbb453b771  socat-1.7.2.0.tar.gz
+c807a2feb6fdd8cdbd8b075a36e8f5f4  socat-1.7.2.1.tar.gz