diff --git a/.gitignore b/.gitignore
index 6c0c8d7..e9b7aac 100644
--- a/.gitignore
+++ b/.gitignore
@@ -9,3 +9,4 @@ libgcrypt-1.4.5-hobbled.tar.bz2
 /libgcrypt-1.6.3-hobbled.tar.xz
 /libgcrypt-1.6.4-hobbled.tar.xz
 /libgcrypt-1.6.5-hobbled.tar.xz
+/libgcrypt-1.6.6-hobbled.tar.xz
diff --git a/libgcrypt.spec b/libgcrypt.spec
index ebd9f98..590cabc 100644
--- a/libgcrypt.spec
+++ b/libgcrypt.spec
@@ -1,5 +1,5 @@
 Name: libgcrypt
-Version: 1.6.5
+Version: 1.6.6
 Release: 1%{?dist}
 URL: http://www.gnupg.org/
 Source0: libgcrypt-%{version}-hobbled.tar.xz
@@ -208,6 +208,9 @@ exit 0
 %license COPYING
 
 %changelog
+* Wed Aug 17 2016 Tomáš Mráz <tmraz@redhat.com> 1.6.6-1
+- new upstream version with important security fix (CVE-2016-6316)
+
 * Thu Jul 21 2016 Tomáš Mráz <tmraz@redhat.com> 1.6.5-1
 - new upstream version fixing low impact issue CVE-2015-7511
 
diff --git a/sources b/sources
index 4e90cdb..4a375a0 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-2703d21753c0c3fbb74ad4b10e1571a1  libgcrypt-1.6.5-hobbled.tar.xz
+67edcc4715a8c239eac70a931e49660d  libgcrypt-1.6.6-hobbled.tar.xz