diff --git a/putty-0.65.tar.gz b/putty-0.65.tar.gz
deleted file mode 100644
index ddbc63c..0000000
--- a/putty-0.65.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:d543c1fd4944ea51d46d4abf31bfb8cde9bd1c65cb36dc6b83e51ce875660ca0
-size 1937861
diff --git a/putty-0.65.tar.gz.RSA b/putty-0.65.tar.gz.RSA
deleted file mode 100644
index 61dd083..0000000
Binary files a/putty-0.65.tar.gz.RSA and /dev/null differ
diff --git a/putty-0.66.tar.gz b/putty-0.66.tar.gz
new file mode 100644
index 0000000..c1c2565
--- /dev/null
+++ b/putty-0.66.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:fe7312f66c54865868b362f4b79bd1fbe7ce9e8b1fd504b04034182db1f32993
+size 1948323
diff --git a/putty-0.66.tar.gz.gpg b/putty-0.66.tar.gz.gpg
new file mode 100644
index 0000000..c6c4853
Binary files /dev/null and b/putty-0.66.tar.gz.gpg differ
diff --git a/putty.changes b/putty.changes
index e7262fd..b65ac07 100644
--- a/putty.changes
+++ b/putty.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Mon Nov  9 08:47:47 UTC 2015 - jengelh@inai.de
+
+- Update to new upstream release 0.66
+* Resolve integer overflow, buffer underrun in terminal emulator's
+  ECH handling. [CVE-2015-5309, bnc#954191]
+* Resolve format string vulnerabilities
+
 -------------------------------------------------------------------
 Mon Jul 27 12:16:00 UTC 2015 - jengelh@inai.de
 
diff --git a/putty.spec b/putty.spec
index dac9eb6..5bc47bb 100644
--- a/putty.spec
+++ b/putty.spec
@@ -17,7 +17,7 @@
 
 
 Name:           putty
-Version:        0.65
+Version:        0.66
 Release:        0
 Summary:        GTK-based terminal emulator program
 License:        MIT
@@ -27,7 +27,7 @@ Url:            http://www.chiark.greenend.org.uk/~sgtatham/putty/
 #Git-Web:	http://tartarus.org/~simon-git/gitweb/?p=putty.git
 #Git-Clone:	git://git.tartarus.org/simon/putty
 Source:         http://the.earth.li/~sgtatham/putty/latest/%name-%version.tar.gz
-Source2:        http://the.earth.li/~sgtatham/putty/latest/%name-%version.tar.gz.RSA
+Source2:        http://the.earth.li/~sgtatham/putty/latest/%name-%version.tar.gz.gpg
 Source4:        %name.keyring
 Patch1:         putty-03-config.diff
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
@@ -91,10 +91,10 @@ make check
 %files
 %defattr(-,root,root)
 %doc LICENCE doc/*.html
-%doc %{_mandir}/man*/*
-%{_bindir}/*
-%{_datadir}/applications/%{name}.desktop
-%{_datadir}/pixmaps/*.png
-%{_datadir}/pixmaps/*.xpm
+%doc %_mandir/man*/*
+%_bindir/*
+%_datadir/applications/%name.desktop
+%_datadir/pixmaps/*.png
+%_datadir/pixmaps/*.xpm
 
 %changelog