diff --git a/apptainer-1.1.5.tar.gz b/apptainer-1.1.5.tar.gz
deleted file mode 100644
index 4286fad..0000000
--- a/apptainer-1.1.5.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:f6ed14a02a5bb31cc75371d99309abca1d6aa6c5b04295e73a0701a26d0a31af
-size 5186268
diff --git a/apptainer-1.1.6.tar.gz b/apptainer-1.1.6.tar.gz
new file mode 100644
index 0000000..522e59e
--- /dev/null
+++ b/apptainer-1.1.6.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:da5f3d54e636713d103f5b125e1a816b965f4de08a833f461ca64d9d319f37b9
+size 5188018
diff --git a/apptainer.changes b/apptainer.changes
index b9eb26d..7cac43c 100644
--- a/apptainer.changes
+++ b/apptainer.changes
@@ -1,3 +1,33 @@
+-------------------------------------------------------------------
+Wed Feb 15 09:01:08 UTC 2023 - Christian Goll <cgoll@suse.com>
+
+- update to 1.1.6 with following changes:
+
+  * Included a fix for CVE-2022-23538 which potentially leaked user credentials
+    to a third-party S3 storage service when using the library:// protocol. See
+    the https://github.com/sylabs/scs-library-client/security/advisories/GHSA-7p8m-22h4-9pj7  
+    for details.
+  * Make PS1 environment variable changeable via %environment section on
+    definition file that used to be only changeable via APPTAINERENV_PS1
+    outside of container. This makes the container's prompt customizable.
+  * Fix the passing of nested bind mounts when there are multiple binds
+    separated by commas and some of them have colons separating sources and
+    destinations.
+  * Hide messages about SINGULARITY variables if corresponding APPTAINER
+    variables are defined. Fixes a regression introduced in 1.1.4.
+  * Print a warning if extra arguments are given to a shell action, and show in
+    the run action usage that arguments may be passed.
+  * Check for the existence of the runtime executable prefix, to avoid issues
+    when running under Slurm's srun. If it doesn't exist, fall back to the
+    compile-time prefix.
+  * Increase the timeout on image driver (that is, FUSE) mounts from 2 seconds
+    to 10 seconds. Instead, print an INFO message if it takes more than 2
+    seconds.
+  * If a remote is defined both globally (i.e. system-wide) and individually,
+    change apptainer remote commands to print an info message instead of
+    exiting with a fatal error and to give precedence to the individual
+    configuration.
+
 -------------------------------------------------------------------
 Wed Jan 11 10:25:45 UTC 2023 - Christian Goll <cgoll@suse.com>
 
diff --git a/apptainer.spec b/apptainer.spec
index 15f800b..83d437d 100644
--- a/apptainer.spec
+++ b/apptainer.spec
@@ -25,7 +25,7 @@ Summary:        Application and environment virtualization
 License:        BSD-3-Clause-LBNL
 Group:          Productivity/Clustering/Computing
 Name:           apptainer
-Version:        1.1.5
+Version:        1.1.6
 Release:        0
 # https://spdx.org/licenses/BSD-3-Clause-LBNL.html
 URL:            https://apptainer.org
diff --git a/vendor.tar.gz b/vendor.tar.gz
index 20ca387..45d1cd9 100644
--- a/vendor.tar.gz
+++ b/vendor.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:dd1ee418aeb61d5a9679fe6517f01eebe313e5b8ae532b203aacd13be2bba92c
-size 7349891
+oid sha256:8e503b473a008cd681079b7b782ddace9e7dc7d1864b12be10b1d40eaf09350b
+size 7350195