diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9f8a607d..fa92ebc0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,7 @@
 - Kube-proxy: add `metrics-port` and `metrics-bind-address` to cmd flags
 - [cri-o: 1.13.1](https://github.com/kubernetes-sigs/cri-o/releases/tag/v1.13.1)
 - [buildah: 1.7.1](https://github.com/containers/buildah/releases/tag/v1.7.1)
+- [Etcd: 3.3.12](https://github.com/etcd-io/etcd/releases/tag/v3.3.12)
 
 # 1.13.3 (02.02.2019)
 - [Weave Net: 2.5.1](https://github.com/weaveworks/weave/releases/tag/v2.5.1)
diff --git a/attributes/etcd.rb b/attributes/etcd.rb
index 0c8f81f1..3a028bc4 100644
--- a/attributes/etcd.rb
+++ b/attributes/etcd.rb
@@ -1,5 +1,5 @@
-default['etcd']['version']               = 'v3.3.11'
-default['etcd']['checksum']              = 'ef794bc8eb73e34c571768fe781b842d6e52c48a189418cd8bdac79985d06070'
+default['etcd']['version']               = 'v3.3.12'
+default['etcd']['checksum']              = 'dc5d82df095dae0a2970e4d870b6929590689dd707ae3d33e7b86da0f7f211b6'
 default['etcd']['image']                 = 'quay.io/coreos/etcd'
 default['etcd']['trusted_ca_file']       = '/etc/kubernetes/ssl/ca.pem'
 default['etcd']['client_cert_auth']      = 'true'