diff --git a/pam_krb5-2.3.5-1.tar.bz2 b/pam_krb5-2.3.5-1.tar.bz2
deleted file mode 100644
index e9d9b2c..0000000
--- a/pam_krb5-2.3.5-1.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ac87e5b7b7a6570f31ddacb16c621e08a7bc82f6a45f8120abc0e9fcf9ece626
-size 428901
diff --git a/pam_krb5-2.3.7-1.tar.bz2 b/pam_krb5-2.3.7-1.tar.bz2
new file mode 100644
index 0000000..0081d01
--- /dev/null
+++ b/pam_krb5-2.3.7-1.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:e55d8a04b296f6ba837aae3d0087b2df4b12aa3a42ab328e7a789b6c69b85c5c
+size 419491
diff --git a/pam_krb5.changes b/pam_krb5.changes
index da7cceb..c0c8f3e 100644
--- a/pam_krb5.changes
+++ b/pam_krb5.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Mon Jul 27 11:53:30 CEST 2009 - mc@novell.com
+
+- version 2.3.7
+  * when refreshing credentials, store the new creds in the default
+    ccache if $KRB5CCNAME isn't set.
+  * prefer a "host" key, if one is found, when validating TGTs
+
 -------------------------------------------------------------------
 Wed Jun 24 19:29:55 CEST 2009 - sbrabec@suse.cz
 
diff --git a/pam_krb5.spec b/pam_krb5.spec
index d96b12b..ebf0be5 100644
--- a/pam_krb5.spec
+++ b/pam_krb5.spec
@@ -1,5 +1,5 @@
 #
-# spec file for package pam_krb5 (Version 2.3.5)
+# spec file for package pam_krb5 (Version 2.3.7)
 #
 # Copyright (c) 2009 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
@@ -30,8 +30,8 @@ AutoReqProv:    on
 Obsoletes:      pam_krb5-64bit
 %endif
 #
-Version:        2.3.5
-Release:        3
+Version:        2.3.7
+Release:        1
 Summary:        PAM Module for Kerberos Authentication
 Url:            http://sourceforge.net/projects/pam-krb5/
 Source:         pam_krb5-%{version}-%{PAM_RELEASE}.tar.bz2