diff --git a/python-urllib3_1.changes b/python-urllib3_1.changes
index a716bc3..3fd47ef 100644
--- a/python-urllib3_1.changes
+++ b/python-urllib3_1.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Thu Oct  5 15:35:21 UTC 2023 - Daniel Garcia <daniel.garcia@suse.com>
+
+- update to 1.26.17 (bsc#1215968, CVE-2023-43804):
+  * Added the Cookie header to the list of headers to strip from
+  * requests when redirecting to a different host. As before,
+  * different headers can be set via Retry.remove_headers_on_redirect.
+
 -------------------------------------------------------------------
 Tue May 23 20:02:08 UTC 2023 - Dirk Müller <dmueller@suse.com>
 
diff --git a/python-urllib3_1.spec b/python-urllib3_1.spec
index 117abbb..1f5af0f 100644
--- a/python-urllib3_1.spec
+++ b/python-urllib3_1.spec
@@ -26,7 +26,7 @@
 %endif
 %{?sle15_python_module_pythons}
 Name:           python-urllib3_1%{psuffix}
-Version:        1.26.16
+Version:        1.26.17
 Release:        0
 Summary:        HTTP library with thread-safe connection pooling, file post, and more
 License:        MIT
diff --git a/urllib3-1.26.16.tar.gz b/urllib3-1.26.16.tar.gz
deleted file mode 100644
index 2484b72..0000000
--- a/urllib3-1.26.16.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:8f135f6502756bde6b2a9b28989df5fbe87c9970cecaa69041edcce7f0589b14
-size 303733
diff --git a/urllib3-1.26.17.tar.gz b/urllib3-1.26.17.tar.gz
new file mode 100644
index 0000000..3334853
--- /dev/null
+++ b/urllib3-1.26.17.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:24d6a242c28d29af46c3fae832c36db3bbebcc533dd1bb549172cd739c82df21
+size 305031