diff --git a/.gitignore b/.gitignore
index f4255ce..450aeca 100644
--- a/.gitignore
+++ b/.gitignore
@@ -18,3 +18,4 @@ pam_ssh_agent_auth-0.9.2.tar.bz2
 /openssh-6.9p1.tar.gz
 /openssh-7.0p1.tar.gz
 /openssh-7.1p1.tar.gz
+/openssh-7.1p2.tar.gz
diff --git a/openssh.spec b/openssh.spec
index 7eff3c1..8f09274 100644
--- a/openssh.spec
+++ b/openssh.spec
@@ -65,10 +65,10 @@
 %endif
 
 # Do not forget to bump pam_ssh_agent_auth release if you rewind the main package release to 1
-%global openssh_ver 7.1p1
-%global openssh_rel 7
+%global openssh_ver 7.1p2
+%global openssh_rel 1
 %global pam_ssh_agent_ver 0.9.3
-%global pam_ssh_agent_rel 8
+%global pam_ssh_agent_rel 9
 
 Summary: An open source implementation of SSH protocol versions 1 and 2
 Name: openssh
@@ -821,6 +821,9 @@ getent passwd sshd >/dev/null || \
 %endif
 
 %changelog
+* Thu Jan 14 2016 Jakub Jelen <jjelen@redhat.com> 7.1p2-1 + 0.9.2-9
+- New security upstream release for CVE-2016-0777
+
 * Tue Jan 12 2016 Jakub Jelen <jjelen@redhat.com> 7.1p1-7 + 0.9.2-8
 - Change RPM define macros to global according to packaging guidelines
 - Fix wrong handling of SSH_COPY_ID_LEGACY environment variable
diff --git a/sources b/sources
index d6dbd61..9b473ce 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
 9872ca1983e566ff5a89c240529e223d  pam_ssh_agent_auth-0.9.3.tar.bz2
-8709736bc8a8c253bc4eeb4829888ca5  openssh-7.1p1.tar.gz
+4d8547670e2a220d5ef805ad9e47acf2  openssh-7.1p2.tar.gz