diff --git a/NEWS b/NEWS
index eea9ae6..fbc26e1 100644
--- a/NEWS
+++ b/NEWS
@@ -1,5 +1,10 @@
 NEWS for rsync-bpc-3.0.9.
 
+3.0.9.12 released 27 Jan 2018:
+
+   - in bpc_read() ensure we don't read past the end of the buffer, in case actual file's
+     size is less than the attribute file size.
+
 3.0.9.11 released 13 Dec 2017:
 
     - ensure hlink_nlinks is non-NULL before using it.
diff --git a/configure.ac b/configure.ac
index 60822a8..0c27a82 100644
--- a/configure.ac
+++ b/configure.ac
@@ -5,7 +5,7 @@ AC_CONFIG_SRCDIR([byteorder.h])
 AC_CONFIG_HEADER(config.h)
 AC_PREREQ(2.59)
 
-RSYNC_VERSION=3.0.9.11
+RSYNC_VERSION=3.0.9.12
 AC_SUBST(RSYNC_VERSION)
 AC_MSG_NOTICE([Configuring rsync $RSYNC_VERSION])
 
diff --git a/configure.sh b/configure.sh
index 8e023a6..1905d47 100755
--- a/configure.sh
+++ b/configure.sh
@@ -2419,7 +2419,7 @@ ac_config_headers="$ac_config_headers config.h"
 
 
 
-RSYNC_VERSION=3.0.9.11
+RSYNC_VERSION=3.0.9.12
 
 { $as_echo "$as_me:${as_lineno-$LINENO}: Configuring rsync_bpc $RSYNC_VERSION" >&5
 $as_echo "$as_me: Configuring rsync_bpc $RSYNC_VERSION" >&6;}