diff --git a/sources b/sources
index 63da678..cd068f4 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (sqlite-src-3240000.zip) = 812c2df7179abb1e445b5b3e161c940b120c53366a7b2c1f0bfc3599cd9921e5543ba39ca3f297eeaefec318f10c15f630f00f9cf04133c7cd419a04f3bbdd0e
-SHA512 (sqlite-doc-3240000.zip) = 31e9046cea569d7ad1b3af176e1bb18cd59474afb6849871ead6e7c9c096f046162fb313a38684a8c944fad9f689c4c3c692be1d7dc6a8ef5a6685bbc7dfdab6
-SHA512 (sqlite-autoconf-3240000.tar.gz) = eaec866de26003ec36559aab15dd18dc0e6029453002a4eec5e176bb35a712b8b06c235436e6c1a226b67c7eb90d7a26c2b3b3d9a5e6e92a5af485236b77c878
+SHA512 (sqlite-src-3260000.zip) = 02faacd831781f25a12ffc8858d648f481d8bbdb68814b18c4c96e3a661233d0e25d675b95feeb35eee4b5ea88e5e0a1fc5fbaecbe434d3f7246d80e81bff6a3
+SHA512 (sqlite-doc-3260000.zip) = e59f74369adb3ffe3afc235e4369101b8ba077f9cac34d524e2425278c3a30f63340613e5baa0fc3c693265525377b6830a1c6b5e97fb06702b89eb604b1eade
+SHA512 (sqlite-autoconf-3260000.tar.gz) = 8c3306b3814a0e9bc69b741f62bdb6efc9f1e07163ca3e3a1581994465de163a7924223522e812d6b3663c1525c7012a6f6d73ad333556eba9f97ce9326fbdb8
diff --git a/sqlite.spec b/sqlite.spec
index 50d2db3..0a462c8 100644
--- a/sqlite.spec
+++ b/sqlite.spec
@@ -3,14 +3,14 @@
 %bcond_with static
 %bcond_without check
 
-%define realver 3240000
-%define docver 3240000
-%define rpmver 3.24.0
+%define realver 3260000
+%define docver 3260000
+%define rpmver 3.26.0
 
 Summary: Library that implements an embeddable SQL database engine
 Name: sqlite
 Version: %{rpmver}
-Release: 2%{?dist}
+Release: 1%{?dist}
 License: Public Domain
 Group: Applications/Databases
 URL: http://www.sqlite.org/
@@ -242,6 +242,10 @@ make test
 %endif
 
 %changelog
+* Mon Dec 17 2018 Petr Kubat <pkubat@redhat.com> - 3.26.0-1
+- Updated to version 3.26.0 (https://sqlite.org/releaselog/3_26_0.html)
+  Fixes fts3/4 corrupt database exploit (#1659677)
+
 * Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 3.24.0-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild