diff --git a/curl-7.50.2.tar.lzma.asc b/curl-7.50.2.tar.lzma.asc
deleted file mode 100644
index f31caa1..0000000
--- a/curl-7.50.2.tar.lzma.asc
+++ /dev/null
@@ -1,10 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQEcBAABCgAGBQJXz6qdAAoJEFzJCP23HhLC6twH/3QeGbEA0pOOaA77CBI83SgY
-76BieyDb2WPz1krUv09zMijIhKyy9+F+aCygBotzcUMDsrT0cLf/6xZKI3chAcGo
-H6S/ewRJvcx0IxAuaVlj+r3K5ZB7PY4GoDqGIngRgHSDyMkHEioOnUeG57FuTNJ3
-1gmeFnfkwtDGUcctGNndG7XbfUcFCyN60q6BAFUn5eXaHEm19xNiveeo9+mt2jse
-phsvmKrzTqCMFNZgeU0OoFQnVPL41J9nBcHlGDzpv5yAW8gM46dS9pV8t2lSUW02
-jGtGpLQLLDOgmJrpkQEDUp/xWKFifPmNog8NsUQ4lxe8fGf1DkHrmIRVPKsge/k=
-=L2bZ
------END PGP SIGNATURE-----
diff --git a/curl-7.50.3.tar.lzma.asc b/curl-7.50.3.tar.lzma.asc
new file mode 100644
index 0000000..f51fcc1
--- /dev/null
+++ b/curl-7.50.3.tar.lzma.asc
@@ -0,0 +1,10 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEcBAABCgAGBQJX2OcWAAoJEFzJCP23HhLCOUkH/A+cGespPSg0Z8DH8P+VGBf2
+r4kKlx+BktOFmD9v35EGTUpLAmJ7rH573kOXXTuu4uBLN5P05Vy2Y6Pb3RJkutJA
+uXPg0tvIyopGWKSEPEsffk83YkunKr0DaCfILM2XyMZpAEvS6hUf+RZmSTOqNn8Y
+Yn6zO1FnhG/407w1T63eFovbfbjo4Qwh+CYkfLhzj9niGEEinocUqkni4F1AH1vj
+W1iCLCEa13bcBU1lw1AuPPYz8S5hAeOmZB2PQUj/Qa9rQq5iAfwfCuVAU8u/mVo1
+0LFzwh7/iV0a73GXL1KaCJ1MkiDgZwoSdtjLm+k0hcpOJR0NwU4TjLC7EyXEBrI=
+=s7H5
+-----END PGP SIGNATURE-----
diff --git a/curl.spec b/curl.spec
index 0623c29..4ed68a4 100644
--- a/curl.spec
+++ b/curl.spec
@@ -1,6 +1,6 @@
 Summary: A utility for getting files from remote servers (FTP, HTTP, and others)
 Name: curl
-Version: 7.50.2
+Version: 7.50.3
 Release: 1%{?dist}
 License: MIT
 Group: Applications/Internet
@@ -232,6 +232,9 @@ rm -rf $RPM_BUILD_ROOT
 %{_datadir}/aclocal/libcurl.m4
 
 %changelog
+* Wed Sep 14 2016 Kamil Dudka <kdudka@redhat.com> 7.50.3-1
+- new upstream release (fixes CVE-2016-7167)
+
 * Wed Sep 07 2016 Kamil Dudka <kdudka@redhat.com> 7.50.2-1
 - new upstream release
 
diff --git a/sources b/sources
index f7e4858..55ec8da 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-440fb3aa31a9e97f95394fd2022552c3  curl-7.50.2.tar.lzma
+6080c1eb3e72d5da6c892ba72a074ad2  curl-7.50.3.tar.lzma