diff --git a/.gitignore b/.gitignore
index 63000a2..ae4cd94 100644
--- a/.gitignore
+++ b/.gitignore
@@ -11,3 +11,4 @@
 /sudo-1.8.20p1.tar.gz
 /sudo-1.8.20p2.tar.gz
 /sudo-1.8.21p2.tar.gz
+/sudo-1.8.22b1.tar.gz
diff --git a/sources b/sources
index a15d86f..f20f88b 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (sudo-1.8.21p2.tar.gz) = f04bbff54ad74ba73c078e15c75d2f41332d4912078ed66157ba7346b7fff914bd0747460cb4cd0c472af2d3b344fa72f5c62c95169df68a9cac74d7245c720c
+SHA512 (sudo-1.8.22b1.tar.gz) = 2289e0203898feccb31529899230b7e1f5e634af5e71d252628dc9a6f1bc73257f3b44d0068f1cba244cc33fa677538c327fcd291537811ac57fd4b65dc5a4ea
diff --git a/sudo.spec b/sudo.spec
index 0e3f504..9e7bdf6 100644
--- a/sudo.spec
+++ b/sudo.spec
@@ -2,12 +2,12 @@
 
 Summary: Allows restricted root access for specified users
 Name: sudo
-Version: 1.8.21p2
-Release: 1%{?dist}
+Version: 1.8.22
+Release: 0.1.b1%{?dist}
 License: ISC
 Group: Applications/System
 URL: http://www.courtesan.com/sudo/
-Source0: https://www.sudo.ws/dist/%{name}-%{version}.tar.gz
+Source0: https://www.sudo.ws/dist/beta/%{name}-%{version}b1.tar.gz
 Source1: sudoers
 Buildroot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 Requires: pam
@@ -50,7 +50,7 @@ The %{name}-devel package contains header files developing sudo
 plugins that use %{name}.
 
 %prep
-%setup -q
+%setup -q -n sudo-1.8.22b1
 
 %patch1 -p1 -b .strip
 
@@ -204,6 +204,10 @@ rm -rf $RPM_BUILD_ROOT
 %{_mandir}/man8/sudo_plugin.8*
 
 %changelog
+* Thu Dec 14 2017 Radovan Sroka <rsroka@redhat.com> - 1.8.22b1-1
+- update to 1.8.22b1
+- Added /usr/local/sbin and /usr/local/bin to secure path rhbz#1166185
+
 * Thu Sep 21 2017 Marek Tamaskovic <mtamasko@redhat.com> - 1.8.21p2-1
 - update to 1.8.21p2
 - Moved libsudo_util.so from the -devel sub-package to main package (1481225) 
diff --git a/sudoers b/sudoers
index bc4d793..17afb17 100644
--- a/sudoers
+++ b/sudoers
@@ -61,7 +61,7 @@ Defaults    env_keep += "LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES
 Defaults    env_keep += "LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE"
 Defaults    env_keep += "LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY"
 
-Defaults    secure_path = /sbin:/bin:/usr/sbin:/usr/bin
+Defaults    secure_path = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
 
 ## Next comes the main part: which users can run what software on 
 ## which machines (the sudoers file can be shared between multiple