diff --git a/libunbound-devel-mini.changes b/libunbound-devel-mini.changes
index fb42809..ec25b06 100644
--- a/libunbound-devel-mini.changes
+++ b/libunbound-devel-mini.changes
@@ -1,3 +1,36 @@
+-------------------------------------------------------------------
+Tue Oct 10 08:20:16 UTC 2017 - michael@stroeder.com
+
+- update to 1.6.7
+
+Features:
+- Set trust-anchor-signaling default to yes
+- Fix #1440: [dnscrypt] client nonce cache.
+- Fix #1435: Please allow UDP to be disabled separately upstream and
+  downstream.
+
+Bug fixes:
+- Fix that looping modules always stop the query, and don't pass
+  control.
+- Fix unbound-host to report error for DNSSEC state of failed lookups.
+- Spelling fixes, from Josh Soref.
+- Fix #1400: allowing use of global cache on ECS-forwarding unless
+  always-forward.
+- use a cachedb answer even if it's "expired" when serve-expired is yes
+  (patch from Jinmei Tatuya).
+- trigger refetching of the answer in that case (this will bypass
+  cachedb lookup)
+- allow storing a 0-TTL answer from cachedb in the in-memory message
+  cache when serve-expired is yes
+- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
+- Log name of looping module
+- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
+   (by Danilo G. Baio).
+- Fix param unused warning for windows exportsymbol compile.
+- Use RCODE from A query on DNS64 synthesized answer.
+- Fix trust-anchor-signaling works in libunbound.
+- Fix spelling in unbound-control man page.
+
 -------------------------------------------------------------------
 Mon Sep  4 16:17:44 UTC 2017 - michael@stroeder.com
 
diff --git a/libunbound-devel-mini.spec b/libunbound-devel-mini.spec
index 6f800c3..43f6904 100644
--- a/libunbound-devel-mini.spec
+++ b/libunbound-devel-mini.spec
@@ -24,7 +24,7 @@
 
 #
 Name:           libunbound-devel-mini
-Version:        1.6.6
+Version:        1.6.7
 Release:        0
 #
 #
diff --git a/unbound-1.6.6.tar.gz b/unbound-1.6.6.tar.gz
deleted file mode 100644
index bb67625..0000000
--- a/unbound-1.6.6.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:972b14dc33093e672652a7b2b5f159bab2198b0fe9c9e1c5707e1895d4d4b390
-size 5460482
diff --git a/unbound-1.6.7.tar.gz b/unbound-1.6.7.tar.gz
new file mode 100644
index 0000000..7da23c6
--- /dev/null
+++ b/unbound-1.6.7.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4e7bd43d827004c6d51bef73adf941798e4588bdb40de5e79d89034d69751c9f
+size 5466931
diff --git a/unbound.changes b/unbound.changes
index fb42809..ec25b06 100644
--- a/unbound.changes
+++ b/unbound.changes
@@ -1,3 +1,36 @@
+-------------------------------------------------------------------
+Tue Oct 10 08:20:16 UTC 2017 - michael@stroeder.com
+
+- update to 1.6.7
+
+Features:
+- Set trust-anchor-signaling default to yes
+- Fix #1440: [dnscrypt] client nonce cache.
+- Fix #1435: Please allow UDP to be disabled separately upstream and
+  downstream.
+
+Bug fixes:
+- Fix that looping modules always stop the query, and don't pass
+  control.
+- Fix unbound-host to report error for DNSSEC state of failed lookups.
+- Spelling fixes, from Josh Soref.
+- Fix #1400: allowing use of global cache on ECS-forwarding unless
+  always-forward.
+- use a cachedb answer even if it's "expired" when serve-expired is yes
+  (patch from Jinmei Tatuya).
+- trigger refetching of the answer in that case (this will bypass
+  cachedb lookup)
+- allow storing a 0-TTL answer from cachedb in the in-memory message
+  cache when serve-expired is yes
+- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
+- Log name of looping module
+- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
+   (by Danilo G. Baio).
+- Fix param unused warning for windows exportsymbol compile.
+- Use RCODE from A query on DNS64 synthesized answer.
+- Fix trust-anchor-signaling works in libunbound.
+- Fix spelling in unbound-control man page.
+
 -------------------------------------------------------------------
 Mon Sep  4 16:17:44 UTC 2017 - michael@stroeder.com
 
diff --git a/unbound.spec b/unbound.spec
index bb07b03..aba6c10 100644
--- a/unbound.spec
+++ b/unbound.spec
@@ -53,7 +53,7 @@
 %endif
 
 Name:           unbound
-Version:        1.6.6
+Version:        1.6.7
 Release:        0
 #
 #