diff --git a/putty-0.66.tar.gz b/putty-0.66.tar.gz
deleted file mode 100644
index c1c2565..0000000
--- a/putty-0.66.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:fe7312f66c54865868b362f4b79bd1fbe7ce9e8b1fd504b04034182db1f32993
-size 1948323
diff --git a/putty-0.66.tar.gz.gpg b/putty-0.66.tar.gz.gpg
deleted file mode 100644
index c6c4853..0000000
Binary files a/putty-0.66.tar.gz.gpg and /dev/null differ
diff --git a/putty-0.67.tar.gz b/putty-0.67.tar.gz
new file mode 100644
index 0000000..a32e56c
--- /dev/null
+++ b/putty-0.67.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:80192458e8a46229de512afeca5c757dd8fce09606b3c992fbaeeee29b994a47
+size 1955547
diff --git a/putty-0.67.tar.gz.gpg b/putty-0.67.tar.gz.gpg
new file mode 100644
index 0000000..2bfe2b2
Binary files /dev/null and b/putty-0.67.tar.gz.gpg differ
diff --git a/putty.changes b/putty.changes
index b65ac07..d7168da 100644
--- a/putty.changes
+++ b/putty.changes
@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Tue Mar  8 18:35:39 UTC 2016 - bwiedemann@suse.com
+
+- Add reproducible.patch to fix build-compare
+
+-------------------------------------------------------------------
+Tue Mar  8 16:43:24 UTC 2016 - jengelh@inai.de
+
+- Update to new upstream release 0.67
+* resolved a security issue with the PSCP protocol implementation
+
 -------------------------------------------------------------------
 Mon Nov  9 08:47:47 UTC 2015 - jengelh@inai.de
 
diff --git a/putty.spec b/putty.spec
index 5bc47bb..c4dca2d 100644
--- a/putty.spec
+++ b/putty.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package putty
 #
-# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:           putty
-Version:        0.66
+Version:        0.67
 Release:        0
 Summary:        GTK-based terminal emulator program
 License:        MIT
@@ -30,6 +30,7 @@ Source:         http://the.earth.li/~sgtatham/putty/latest/%name-%version.tar.gz
 Source2:        http://the.earth.li/~sgtatham/putty/latest/%name-%version.tar.gz.gpg
 Source4:        %name.keyring
 Patch1:         putty-03-config.diff
+Patch2:         reproducible.patch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 BuildRequires:  ImageMagick
 BuildRequires:  gtk2-devel
@@ -44,7 +45,7 @@ serial console client.
 
 %prep
 %setup -q
-%patch -P 1 -p1
+%patch -P 1 -P 2 -p1
 
 %build
 %configure
diff --git a/reproducible.patch b/reproducible.patch
new file mode 100644
index 0000000..0a41f90
--- /dev/null
+++ b/reproducible.patch
@@ -0,0 +1,17 @@
+From: Bernhard Wiedemann <bwiedemann@suse.com>
+Date: Tue, 8 Mar 2016 19:39:47
+# PATCH-FIX-TO-UPSTREAM
+
+Drop build timestamps from png.
+
+--- putty-0.66/icons/mkicon.py.orig	2015-11-07 10:16:40.000000000 +0000
++++ putty-0.66/icons/mkicon.py	2016-03-08 18:34:34.600917451 +0000
+@@ -912,7 +912,7 @@
+     assert minx >= 0 and miny >= 0 and maxx <= width and maxy <= width
+ 
+     block = render(canvas, 0, 0, width, width)
+-    p = os.popen("convert -depth 8 -size %dx%d rgba:- %s" % (width,width,fname), "w")
++    p = os.popen("convert -strip -depth 8 -size %dx%d rgba:- %s" % (width,width,fname), "w")
+     assert len(block) == width
+     for line in block:
+         assert len(line) == width