diff --git a/.gitignore b/.gitignore
index 55616ea..0b04d27 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,3 +8,4 @@
 /sudo-738c3cbf3e8400bf4a5aeab8966427ff6d630cd2.tar.gz
 /sudo-1.8.19p2.tar.gz
 /sudo-1.8.20b1.tar.gz
+/sudo-1.8.20p1.tar.gz
diff --git a/sources b/sources
index 718bdfe..4921bf3 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (sudo-1.8.20b1.tar.gz) = 8fd9a8d74883b83a4302c0e6e9980773d73c592be69e5246fcab097ae293c299b886a6f83d714bf1638d366f1bc0f00436e291c4f18611049a92f39bdd892e37
+SHA512 (sudo-1.8.20p1.tar.gz) = b7d4c07a550da917029e31d15e734d9462f3565ee43eb5f6fd19463b54a2fa3f444381f0999d6d1ba643b65832056dd9177dad4452fa9f87f2542c223b13f258
diff --git a/sudo.spec b/sudo.spec
index 6007ab0..a96a40f 100644
--- a/sudo.spec
+++ b/sudo.spec
@@ -1,14 +1,13 @@
 %global user            millert
-%global debug_package   %{nil}
 
 Summary: Allows restricted root access for specified users
 Name: sudo
-Version: 1.8.20
-Release: 0.1.b1%{?dist}
+Version: 1.8.20p1
+Release: 1%{?dist}
 License: ISC
 Group: Applications/System
 URL: http://www.courtesan.com/sudo/
-Source0: https://www.sudo.ws/dist/beta/%{name}-%{version}b1.tar.gz
+Source0: https://www.sudo.ws/dist/%{name}-%{version}.tar.gz
 Source1: sudoers
 Buildroot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 Requires: /etc/pam.d/system-auth
@@ -51,7 +50,7 @@ The %{name}-devel package contains header files developing sudo
 plugins that use %{name}.
 
 %prep
-%setup -q -n sudo-1.8.20b1
+%setup -q
 
 %patch1 -p1 -b .strip
 
@@ -124,6 +123,9 @@ rm -rf $RPM_BUILD_ROOT%{_datadir}/examples/sudo
 #Remove all .la files
 find $RPM_BUILD_ROOT -name '*.la' -exec rm -f {} ';'
 
+# Remove sudoers.dist
+rm -f $RPM_BUILD_ROOT%{_sysconfdir}/sudoers.dist
+
 %find_lang sudo
 %find_lang sudoers
 
@@ -202,6 +204,11 @@ rm -rf $RPM_BUILD_ROOT
 %{_libexecdir}/sudo/libsudo_util.so
 
 %changelog
+* Wed May 31 2017 Daniel Kopecek <dkopecek@redhat.com> 1.8.20p1-1
+- update to 1.8.20p1
+- fixes CVE-2017-1000367
+  Resolves: rhbz#1456884
+
 * Fri Apr 07 2017 Jiri Vymazal <jvymazal@redhat.com> - 1.8.20-0.1.b1
 - update to latest development version 1.8.20b1
 - added sudo to dnf/yum protected packages