diff --git a/.gitignore b/.gitignore
index fed8e35..d8e09c4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -264,3 +264,4 @@
 /v1.5.0.tar.gz
 /v1.5.1.tar.gz
 /v1.5.2.tar.gz
+/v1.7.0.tar.gz
diff --git a/skopeo.spec b/skopeo.spec
index eededf4..123dee6 100644
--- a/skopeo.spec
+++ b/skopeo.spec
@@ -36,12 +36,12 @@
 
 # Used for comparing with latest upstream tag
 # to decide whether to autobuild
-%global built_tag v1.5.2
+%global built_tag v1.7.0
 %global built_tag_strip %(b=%{built_tag}; echo ${b:1})
 
 Name: %{repo}
 Epoch: %{conditional_epoch}
-Version: 1.5.2
+Version: 1.7.0
 Release: 1%{?dist}
 Summary: Inspect container images and repositories on registries
 License: ASL 2.0
@@ -379,6 +379,10 @@ export GOPATH=%{buildroot}/%{gopath}:$(pwd)/vendor:%{gopath}
 %{_datadir}/%{name}/test
 
 %changelog
+* Fri Mar 25 2022 Lokesh Mandvekar <lsm5@fedoraproject.org> - 1:1.7.0-1
+- Bump to v1.7.0
+- Resolves: #2045880, #2067383 - Security fix for CVE-2022-21698
+
 * Fri Nov 26 2021 RH Container Bot <rhcontainerbot@fedoraproject.org> - 1:1.5.2-1
 - autobuilt v1.5.2
 
diff --git a/sources b/sources
index 4e9912f..668b3c5 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (v1.5.2.tar.gz) = 7f1dfa41e4fa6a145187413252672b12e59a11ce445d9d5c47c78c4dbb8aa4ffe6925bea20b11034e40725fdb2ac5eacfbb646e7b8cfdd11f07bbb6fc020dda7
+SHA512 (v1.7.0.tar.gz) = 7d17f98e86677150fb2ddba9edae18d8b1ac8f06fba575268e6ba54c60f7b371b5e5a9eab1a4fe19da6c7e85eb79c1eef169ad2a39eff979130ee8d141bd8d6b