diff --git a/.gitignore b/.gitignore
index 57d55cd..affa9c7 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,6 +1,6 @@
-/postgresql-9.5.9.tar.bz2
-/postgresql-9.5.9.tar.bz2.sha256
-/postgresql-9.6.5.tar.bz2
-/postgresql-9.6.5.tar.bz2.sha256
+/postgresql-9.5.10.tar.bz2
+/postgresql-9.5.10.tar.bz2.sha256
+/postgresql-9.6.6.tar.bz2
+/postgresql-9.6.6.tar.bz2.sha256
 /postgresql-setup-6.0.tar.gz
-/postgresql-9.6.5-US.pdf
+/postgresql-9.6.6-US.pdf
diff --git a/postgresql.spec b/postgresql.spec
index 18bc589..cca58a0 100644
--- a/postgresql.spec
+++ b/postgresql.spec
@@ -66,8 +66,8 @@
 Summary: PostgreSQL client programs
 Name: postgresql
 %global majorversion 9.6
-Version: 9.6.5
-Release: 2%{?dist}
+Version: 9.6.6
+Release: 1%{?dist}
 
 # The PostgreSQL license is very similar to other MIT licenses, but the OSI
 # recognizes it as an independent license, so we do as well.
@@ -82,7 +82,7 @@ Url: http://www.postgresql.org/
 # in-place upgrade of an old database.  In most cases it will not be critical
 # that this be kept up with the latest minor release of the previous series;
 # but update when bugs affecting pg_dump output are fixed.
-%global prevversion 9.5.9
+%global prevversion 9.5.10
 %global prevmajorversion 9.5
 
 %global setup_version 6.0
@@ -1199,6 +1199,10 @@ fi
 %endif
 
 %changelog
+* Wed Nov 08 2017 Pavel Raiskup <praiskup@redhat.com> - 9.6.6-1
+- update to 9.6.6 per release notes:
+  https://www.postgresql.org/docs/9.6/static/release-9-6-6.html
+
 * Wed Nov 08 2017 Pavel Raiskup <praiskup@redhat.com> - 9.6.5-2
 - rebase to new postgresql-setup 6.0 version, to fix CVE-2017-15097
 
diff --git a/sources b/sources
index 5281e59..dba69f3 100644
--- a/sources
+++ b/sources
@@ -1,6 +1,6 @@
-SHA512 (postgresql-9.5.9.tar.bz2) = 2c6a887b80a4b1d1da18282f443419db2279d8fe61821aa6ed1e9af6d28dda41959981ccede2456bd8835dccd16a80fd485ebc0a1bdc9459996a5d27d7781c55
-SHA512 (postgresql-9.5.9.tar.bz2.sha256) = 2e41c8a4e4a702c621cde35adc9b3496a67190597673e3c725f4c03313dce22691896aae13813039dfbe46d9e131216bcd657210823a55840ddad110fc0d8cc7
-SHA512 (postgresql-9.6.5.tar.bz2) = ad35c27ea55b18005ea61b49d6994718df86519b3f99addd0ecb17ece1f1c34764eb5194f8961c45cfa75703d810baf54433f8538cfd43a70bd908e1e5878df9
-SHA512 (postgresql-9.6.5.tar.bz2.sha256) = 8cfe5bfb00689ae30b6a3ddbccb8c74c0be244e2317ffa33dc89e56838d8b06a81a59cef0a204fff4f8ef23f7cffd7579b96b2d9207a5efb069e2160c2381a05
+SHA512 (postgresql-9.5.10.tar.bz2) = 24e31adabb0b88be882ab0440c560f0e4d5d69203be0581ca0ce22316555d92219ea0a2fd5254f12b2508bd3e58bbe0f1a7c8837228c96d9d5f00caac45af95a
+SHA512 (postgresql-9.5.10.tar.bz2.sha256) = 3ba06fbb65e1ee560ed279cdb5eb04d4e2e02ee2ee2a2d407a129035706afb32332098c2b3c79c451aa3c98190ac44d5422ed619464e014bd12a571d9b15a08b
+SHA512 (postgresql-9.6.6.tar.bz2) = ac2f0fe6ef7c4e14f85cd7592d1306d9657b7f35efa6f43a089d7785ab970b8c25aa1e66d83df056c23513d6dbac0a9f54717b3d85758560d02e7f8141914ebc
+SHA512 (postgresql-9.6.6.tar.bz2.sha256) = 8ab0aadd03923bf7888f6de055432f7a0bca0c4d3287d38490ae542d87d22e5753b62f1fc30474e9d875b0317a94266bbda5ad4b2cf2dada2b2c480cd9a05772
 SHA512 (postgresql-setup-6.0.tar.gz) = 4fa02b35d3b2d1d79193fd3a6af02532b5a6736dbae23cad485492acd4eb0c5f25159f36eb445a63eac0097ec4c52f57c58b0960fa012577c24daac5a032b243
-SHA512 (postgresql-9.6.5-US.pdf) = 1f9243275239d99a593690a0a04b3b61c36394993e6e9d55b585750e89e4e80391aa9fdeff8d7a5bbc93c0c8bca5989a46e382f531bbc2905866c093afedf6b9
+SHA512 (postgresql-9.6.6-US.pdf) = 1361fe9a311202dc1d22f3388254abf6f0c3dff5a6ce8d54dbc4a77242b4a12d264a5030373431cde123946a838d90d8107d8d537b6e8015240e2fe1207c871b