diff --git a/libzypp-17.5.2.tar.bz2 b/libzypp-17.5.2.tar.bz2
deleted file mode 100644
index 353ab45..0000000
--- a/libzypp-17.5.2.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:5a8f8ba95da1d938824b8b9586c6907a8f062fdb209da5c4c245985708f4109d
-size 4693204
diff --git a/libzypp-17.6.2.tar.bz2 b/libzypp-17.6.2.tar.bz2
new file mode 100644
index 0000000..ea77e36
--- /dev/null
+++ b/libzypp-17.6.2.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c983f0a1a040a84e3f4565045075c894220327747b32cdcf5e93f4b4de41f1ab
+size 4703703
diff --git a/libzypp.changes b/libzypp.changes
index 8f6e301..03a07d6 100644
--- a/libzypp.changes
+++ b/libzypp.changes
@@ -1,3 +1,34 @@
+-------------------------------------------------------------------
+Tue Aug 21 18:46:35 CEST 2018 - ma@suse.de
+
+- fixup! Add filesize check for downloads with known size (bsc#408814)
+  Fix detetction of metalink downloads and prevent aborting if
+  a metalink file is larger than the expected data file.
+- version 17.6.2 (2)
+
+-------------------------------------------------------------------
+Fri Aug 17 14:52:14 CEST 2018 - ma@suse.de
+
+- Adapt to changes in libgpgme11-11.1.0 breaking the signature
+  verification (bsc#1100427)
+- Use %license (bsc#1082318)
+- BuildRequires:  libsolv-devel >= 0.6.35 (for bsc#1100095)
+- changes: add CVE numbers
+- version 17.6.1 (2)
+
+-------------------------------------------------------------------
+Fri Aug  3 11:11:25 CEST 2018 - ma@suse.de
+
+- RepoInfo::provideKey: add report telling where we look for missing
+  keys.
+- Support listing gpgkey URLs in repo files (bsc#1088037)
+- Add new report to request user approval for importing a package key
+- Handle http error 502 Bad Gateway in curl backend (bsc #1070851)
+  (fixes openSUSE/zypper#177)
+- Add filesize check for downloads with known size (bsc#408814)
+- Removed superfluous space in translation (bsc#1102019)
+- version 17.6.0 (2)
+
 -------------------------------------------------------------------
 Thu Jul 19 12:57:21 CEST 2018 - ma@suse.de
 
@@ -22,9 +53,10 @@ Mon Jul  9 14:43:15 CEST 2018 - ma@suse.de
 - HardLocksFile: Prevent against empty commit without Target having
   been been loaded (bsc#1096803)
 - lsof: use '-K i' if lsof supports it (bsc#1099847)
-- PackageProvider: Validate deta rpms before caching (bsc#1091624)
+- PackageProvider: Validate deta rpms before caching (bsc#1091624,
+  bsc#1088705, CVE-2018-7685)
 - PackageProvider: Validate downloaded rpm package signatures
-  before caching (bsc#1091624)
+  before caching (bsc#1091624, bsc#1088705, CVE-2018-7685)
 - version 17.5.0 (2)
 
 -------------------------------------------------------------------
diff --git a/libzypp.spec b/libzypp.spec
index a59b726..7f6cea9 100644
--- a/libzypp.spec
+++ b/libzypp.spec
@@ -17,9 +17,9 @@
 
 
 Name:           libzypp
-Version:        17.5.2
+Version:        17.6.2
 Release:        0
-Url:            git://gitorious.org/opensuse/libzypp.git
+Url:            https://github.com/openSUSE/libzypp
 Summary:        Package, Patch, Pattern, and Product Management
 License:        GPL-2.0-or-later
 Group:          System/Packages
@@ -75,7 +75,7 @@ BuildRequires:  pkgconfig
 BuildRequires:  pkg-config
 %endif
 
-BuildRequires:  libsolv-devel >= 0.6.27
+BuildRequires:  libsolv-devel >= 0.6.35
 %if 0%{?suse_version} >= 1100
 BuildRequires:  libsolv-tools
 %requires_eq    libsolv-tools
@@ -330,6 +330,7 @@ rm -rf "$RPM_BUILD_ROOT"
 
 %files -f zypp.lang
 %defattr(-,root,root)
+%license COPYING
 %dir               %{_sysconfdir}/zypp
 %if 0%{?fedora_version} || 0%{?rhel_version} >= 600 || 0%{?centos_version} >= 600
 %{_sysconfdir}/zypp/repos.d