diff --git a/curl-7.46.0.tar.lzma.asc b/curl-7.46.0.tar.lzma.asc
deleted file mode 100644
index 0231109..0000000
--- a/curl-7.46.0.tar.lzma.asc
+++ /dev/null
@@ -1,7 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1
-
-iEYEABECAAYFAlZel9wACgkQeOEcayedXJEsYACfTnbAnkbePp450rwYPaQz53yI
-zg8Anj+YPivd5G6PTRFM1Q+tD5HEIwzp
-=izYm
------END PGP SIGNATURE-----
diff --git a/curl-7.47.0.tar.lzma.asc b/curl-7.47.0.tar.lzma.asc
new file mode 100644
index 0000000..21faedb
--- /dev/null
+++ b/curl-7.47.0.tar.lzma.asc
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1
+
+iEYEABECAAYFAlaocssACgkQeOEcayedXJEY4ACg3JiNYRFq94RsySUTY11rag/P
+i6QAnj5Qdf0MWw3yMwqiIv+pshKZHNsh
+=7+e8
+-----END PGP SIGNATURE-----
diff --git a/curl.spec b/curl.spec
index 101d4c9..26bd3bb 100644
--- a/curl.spec
+++ b/curl.spec
@@ -1,7 +1,7 @@
 Summary: A utility for getting files from remote servers (FTP, HTTP, and others)
 Name: curl
-Version: 7.46.0
-Release: 2%{?dist}
+Version: 7.47.0
+Release: 1%{?dist}
 License: MIT
 Group: Applications/Internet
 Source: http://curl.haxx.se/download/%{name}-%{version}.tar.lzma
@@ -225,6 +225,9 @@ rm -rf $RPM_BUILD_ROOT
 %{_datadir}/aclocal/libcurl.m4
 
 %changelog
+* Wed Jan 27 2016 Kamil Dudka <kdudka@redhat.com> 7.47.0-1
+- new upstream release (fixes CVE-2016-0755)
+
 * Fri Dec  4 2015 Kamil Dudka <kdudka@redhat.com> 7.46.0-2
 - own /usr/share/zsh/site-functions instead of requiring zsh (#1288529)
 
diff --git a/sources b/sources
index b30f9f3..5f3724d 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-f845c513830d38c1b7ac39a98c1c2b11  curl-7.46.0.tar.lzma
+a6a400c4d6de843d13ffbbb39f4d8173  curl-7.47.0.tar.lzma