diff --git a/roundcubemail-1.3.6-complete.tar.gz b/roundcubemail-1.3.6-complete.tar.gz
deleted file mode 100644
index d14760d..0000000
--- a/roundcubemail-1.3.6-complete.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:f1b86e97cc8fd69bb1957d4115762af6ea2d6957ea17b33dd3ec2995662670d9
-size 5529370
diff --git a/roundcubemail-1.3.6-complete.tar.gz.asc b/roundcubemail-1.3.6-complete.tar.gz.asc
deleted file mode 100644
index 6802f9c..0000000
--- a/roundcubemail-1.3.6-complete.tar.gz.asc
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIcBAABCAAGBQJazmYfAAoJEMKUapYJzVa061MQAIL7vw9n0CrmLV7ndCE5+U77
-ZBM6kP7uOlGCrkcnV952gvIq/S8V+/Ddza3YsIJpVFeqa4nd2ztwW9SX0y6pGzy4
-66riJBpUfqF58R7rma3JWBbqvzHtBpWjw0jCXygKVKcKB8nxvKjPXwV294rH3BP/
-PfsIhW0TtEXC5Iyk0epv5x0UbbiLkvNURTXqgkQNewTK9WfnFlrM5AIdVsn2xEPe
-D9Yso53JJh5jmk95Md6StVjymMeCC20cqjsHiWQq5ZtavnN0vVQOWNs5Lq9tQ5wD
-wuttx56D1eTMNnT9fIkmoq9/mMxxJhlRd6WbIUs2N22wo5RqW44U6wSKVCUiJiEb
-rpQfG1+eAQ6iOWrEiBInC4qGdtR1RrDe7FAC1jqRFkXaAJGucOkZ0IyJEjzNO9ZJ
-AOzW1SRiLD69CTnqfYzEReMFZxjh4x9AOH8GfnqdtlrBEQ/4NIQyR6aeCwU2mGWI
-8P8DkppRrwpH44menkVMyVtZleZQgxhJt8wT06p1PzQ42KqGZMpT4CJ+CWHRkhRw
-rAp7LO7ywf7f5pzmqm3dCrSQu+TSNaZSgCuvthew82MjQxzvNaR1Ai2nLLhz0fSD
-rV9+bQYx294udFCJieLjCbYLPK7HnlaMSxK8ovzi756l8HKCbk9oOQuh25wRVvem
-0fERhZrfLwXocWToD7gs
-=vOlx
------END PGP SIGNATURE-----
diff --git a/roundcubemail-1.3.7-complete.tar.gz b/roundcubemail-1.3.7-complete.tar.gz
new file mode 100644
index 0000000..4f65257
--- /dev/null
+++ b/roundcubemail-1.3.7-complete.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:31bd37d0f89dc634064f170c6ed8981c258754b6f81eccb59a2634b29d0bb01c
+size 5533537
diff --git a/roundcubemail-1.3.7-complete.tar.gz.asc b/roundcubemail-1.3.7-complete.tar.gz.asc
new file mode 100644
index 0000000..074dea3
--- /dev/null
+++ b/roundcubemail-1.3.7-complete.tar.gz.asc
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+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+=R+Kb
+-----END PGP SIGNATURE-----
diff --git a/roundcubemail.changes b/roundcubemail.changes
index 17160b2..d943fbb 100644
--- a/roundcubemail.changes
+++ b/roundcubemail.changes
@@ -1,3 +1,22 @@
+-------------------------------------------------------------------
+Sat Aug  4 20:59:18 UTC 2018 - michael@stroeder.com
+
+- upstream fixed broken tar.gz archive keeping same version 1.3.7
+
+-------------------------------------------------------------------
+Sat Jul 28 12:21:12 UTC 2018 - michael@stroeder.com
+
+- Upgrade to version 1.3.7
+  * Fix PHP Warning: Use of undefined constant IDNA_DEFAULT on systems without php-intl (#6244)
+  * Fix bug where some parts of quota information could have been ignored (#6280)
+  * Fix bug where some escape sequences in html styles could bypass security checks
+  * Fix bug where some forbidden characters on Cyrus-IMAP were not prevented from use in folder names
+  * Fix bug where only attachments with the same name would be ignored on zip download (#6301)
+  * Fix bug where unicode contact names could have been broken/emptied or caused DB errors (#6299)
+  * Fix bug where after "mark all folders as read" action message counters were not reset (#6307)
+  * Enigma: [EFAIL] Don't decrypt PGP messages with no MDC protection (#6289)
+  * Fix bug where some HTML comments could have been malformed by HTML parser (#6333)
+
 -------------------------------------------------------------------
 Fri Apr 13 06:40:00 UTC 2018 - kbabioch@suse.com
 
diff --git a/roundcubemail.spec b/roundcubemail.spec
index 0d001b3..1607eda 100644
--- a/roundcubemail.spec
+++ b/roundcubemail.spec
@@ -17,7 +17,7 @@
 
 
 Name:           roundcubemail
-Version:        1.3.6
+Version:        1.3.7
 Release:        0
 Summary:        A browser-based multilingual IMAP client
 License:        GPL-3.0-or-later AND GPL-2.0-only AND BSD-3-Clause
@@ -102,6 +102,8 @@ cp %{SOURCE4} .
 find . -name ".gitignore" -delete
 # no need to check .htaccess each time, the apache config takes care of the restrictions
 find . -name ".htaccess" -delete
+# remove obscure sub-directory
+#rm -rf roundcubemail-git composer.json.rej
 # remove mssql scripts (not needed on openSUSE)
 rm -rf \
     SQL/mssql/ \