diff --git a/dovecot.spec b/dovecot.spec
index 30f6d92..d4aa593 100644
--- a/dovecot.spec
+++ b/dovecot.spec
@@ -6,7 +6,7 @@ Name: dovecot
 Epoch: 1
 Version: 2.3.16
 %global prever %{nil}
-Release: 17%{?dist}
+Release: 18%{?dist}
 #dovecot itself is MIT, a few sources are PD, pigeonhole is LGPLv2
 License: MIT and LGPLv2
 
@@ -551,6 +551,9 @@ make check
 %{_libdir}/%{name}/dict/libdriver_pgsql.so
 
 %changelog
+* Mon May 11 2026 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-18
+- rebuild
+
 * Mon May 04 2026 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-17
 - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640)
 - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288)