diff --git a/unbound-1.5.5.tar.gz b/unbound-1.5.5.tar.gz
deleted file mode 100644
index 2d6ada5..0000000
--- a/unbound-1.5.5.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:f3bd7d3bc9519e8717abdc35c26cb2d84c3c3a3e2cd657604307e6860b37da5e
-size 4849969
diff --git a/unbound-1.5.6.tar.gz b/unbound-1.5.6.tar.gz
new file mode 100644
index 0000000..32e3350
--- /dev/null
+++ b/unbound-1.5.6.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ad3823f5895f59da9e408ea273fcf81d8a76914c18864fba256d7f140b83e404
+size 4849569
diff --git a/unbound.changes b/unbound.changes
index cc7cc36..d8cbdab 100644
--- a/unbound.changes
+++ b/unbound.changes
@@ -1,3 +1,21 @@
+-------------------------------------------------------------------
+Thu Oct 15 19:31:43 UTC 2015 - michael@stroeder.com
+
+- update to 1.5.6
+  Features
+  - Default for ssl-port is port 853, the temporary port assignment for
+    secure domain name system traffic. If you used to rely on the older
+    default of port 443, you have to put a clause in unbound.conf for
+    that. The new value is likely going to be the standardised port number
+    for this traffic.
+  - ANY responses include DNAME records if present, as per Evan Hunt's
+    remark in dnsop.
+
+  Bug Fixes
+  - Fix segfault in the dns64 module in the formaterror error path.
+  - Fix manpage to suggest using SIGTERM to terminate the server.
+  - iana portlist update.
+
 -------------------------------------------------------------------
 Sat Oct 10 09:31:40 UTC 2015 - michael@stroeder.com
 
diff --git a/unbound.spec b/unbound.spec
index 5fc705f..fd84053 100644
--- a/unbound.spec
+++ b/unbound.spec
@@ -53,7 +53,7 @@
 %endif
 
 Name:           unbound
-Version:        1.5.5
+Version:        1.5.6
 Release:        0
 #
 #