diff --git a/.gitignore b/.gitignore
index 3c22928..b1d71fd 100644
--- a/.gitignore
+++ b/.gitignore
@@ -23,3 +23,4 @@
 /libgit2-0.26.4.tar.gz
 /libgit2-0.26.5.tar.gz
 /libgit2-0.26.6.tar.gz
+/libgit2-0.26.7.tar.gz
diff --git a/libgit2.spec b/libgit2.spec
index 465a4a0..9012995 100644
--- a/libgit2.spec
+++ b/libgit2.spec
@@ -1,5 +1,5 @@
 Name:           libgit2
-Version:        0.26.6
+Version:        0.26.7
 Release:        1%{?dist}
 Summary:        C implementation of the Git core methods as a library with a solid API
 License:        GPLv2 with exceptions
@@ -74,6 +74,9 @@ popd
 %{_includedir}/git2/
 
 %changelog
+* Mon Oct 08 2018 Pete Walter <pwalter@fedoraproject.org> - 0.26.7-1
+- Update to 0.26.7 (CVE-2018-17456)
+
 * Tue Aug 07 2018 Pete Walter <pwalter@fedoraproject.org> - 0.26.6-1
 - Update to 0.26.6
 
diff --git a/sources b/sources
index fc842cd..cdf376e 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (libgit2-0.26.6.tar.gz) = 6a5a167bfe8696294cf188feec2aad898af52f4c05a3a40a55f48ea3168d200a60fc42b3819a22b1bf472be696f5dafef473d457c08bab164cbf654c4de6bda7
+SHA512 (libgit2-0.26.7.tar.gz) = 5ad0c514b6c1c58031029f4ada278a164cc112f25c36745973df27711f12888000c054816b65889576124e93b71ec9a1c4f4cc0b538f177d93a57bc145fea1e1