diff --git a/.gitignore b/.gitignore
index 5b146de..f9e7865 100644
--- a/.gitignore
+++ b/.gitignore
@@ -29,3 +29,4 @@ livecd-tools-033.tar.bz2
 /livecd-tools-18.13.tar.bz2
 /livecd-tools-18.14.tar.bz2
 /livecd-tools-18.15.tar.bz2
+/livecd-tools-18.16.tar.bz2
diff --git a/livecd-tools.spec b/livecd-tools.spec
index cc18373..a5edada 100644
--- a/livecd-tools.spec
+++ b/livecd-tools.spec
@@ -4,7 +4,7 @@
 
 Summary: Tools for building live CDs
 Name: livecd-tools
-Version: 18.15
+Version: 18.16
 Release: 1%{?dist}
 Epoch: 1
 License: GPLv2
@@ -102,6 +102,11 @@ rm -rf $RPM_BUILD_ROOT
 %{python_sitelib}/imgcreate/*.pyc
 
 %changelog
+* Thu May 23 2013 Brian C. Lane <bcl@redhat.com> 18.16-1
+- Version 18.16 (bcl)
+- Avoid setting empty root password (#964299) (thoger)
+  CVE-2013-2069
+
 * Wed Apr 03 2013 Brian C. Lane <bcl@redhat.com> 18.15-1
 - Version 18.15 (bcl)
 - Use parted to check for GPT disklabel (#947653) (bcl)
diff --git a/sources b/sources
index 6eb9cd1..f131522 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-2ce56408593012369f21c5f568b603b7  livecd-tools-18.15.tar.bz2
+4b5f6975b4d19488d4594040a005f35a  livecd-tools-18.16.tar.bz2