diff --git a/knot.spec b/knot.spec
index c3872d7..7aae1a7 100644
--- a/knot.spec
+++ b/knot.spec
@@ -2,7 +2,7 @@
 %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}-%{version}}
 
 %define GPG_CHECK 1
-%define VERSION 2.6.8
+%define VERSION 2.6.9
 
 Summary: High-performance authoritative DNS server
 Name: knot
@@ -237,6 +237,21 @@ fi
 %{_pkgdocdir}/html
 
 %changelog
+* Mon Oct 01 2018 Tomas Krizek <tomas.krizek@nic.cz> - 2.6.9-1
+Knot DNS 2.6.9 (2018-08-14)
+===========================
+
+Improvements:
+-------------
+ - Added zone wire size to zone loading log message
+ - Added debug log message for each unsuccessful remote address operation
+
+Bugfixes:
+---------
+ - Zone not flushed after re-signing during zone load #594
+ - Server crashes when committing empty zone transaction
+ - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595
+
 * Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.6.8-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
 
diff --git a/sources b/sources
index 88b26f8..daedcdf 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (knot-2.6.8.tar.xz) = 3300985bd4fbf88b58fbb5ba06bdd3dcbe7a50885baa89f9db47811c071a93994a2b17a0dbd27d185feade056ed5d65eef712eedb26de5a4101da363a7c24967
-SHA512 (knot-2.6.8.tar.xz.asc) = 70761db0b2b01a98d18acba4bb4ea4e5f4b49452631194a3dd0e26de272e317b1107382e24c15b2773f849b97a15ae72c55aacf524f643abf144c127127b62fe
+SHA512 (knot-2.6.9.tar.xz) = 80fcbef17c3e6685c09eb57e59001a5f298a083c18ce077dc2f2d1fadbe7c36e543c205c0820bc7971a8ed7547897aec408f51e1a9555a50dae82d047fac471b
+SHA512 (knot-2.6.9.tar.xz.asc) = 33005006439e7609da39b615fb2e88b7da12178d12ca6965d32aa4d5bd294dc566698e6dbf937ee6fd8e008d9fb981729f4a4c9ce5d17f1325ba42ed932b71ee