diff --git a/.gitignore b/.gitignore
index 275d452..619a904 100644
--- a/.gitignore
+++ b/.gitignore
@@ -103,3 +103,5 @@ pigeonhole-snap0592366457df.tar.bz2
 /dovecot-2.2.24.tar.gz
 /dovecot-2.2-pigeonhole-0.4.14.tar.gz
 /dovecot-2.2.25.tar.gz
+/dovecot-2.2.26.0.tar.gz
+/dovecot-2.2-pigeonhole-0.4.16.tar.gz
diff --git a/dovecot.spec b/dovecot.spec
index e94eda0..64a780f 100644
--- a/dovecot.spec
+++ b/dovecot.spec
@@ -3,7 +3,7 @@
 Summary: Secure imap and pop3 server
 Name: dovecot
 Epoch: 1
-Version: 2.2.25
+Version: 2.2.26.0
 %global prever %{nil}
 Release: 1%{?dist}
 #dovecot itself is MIT, a few sources are PD, pigeonhole is LGPLv2
@@ -14,7 +14,7 @@ URL: http://www.dovecot.org/
 Source: http://www.dovecot.org/releases/2.2/%{name}-%{version}%{?prever}.tar.gz
 Source1: dovecot.init
 Source2: dovecot.pam
-%global pigeonholever 0.4.14
+%global pigeonholever 0.4.16
 Source8: http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-%{pigeonholever}.tar.gz
 Source9: dovecot.sysconfig
 Source10: dovecot.tmpfilesd
@@ -481,6 +481,21 @@ make check
 %{_libdir}/%{name}/dict/libdriver_pgsql.so
 
 %changelog
+* Mon Oct 31 2016 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.26.0-1
+- dovecot updated to 2.2.26.0, pigeonhole updated to 0.4.16
+- master process's listener socket was leaked to all child processes.
+  This might have allowed untrusted processes to capture and prevent
+  "doveadm service stop" comands from working.
+- login proxy: Fixed crash when outgoing SSL connections were hanging.
+- auth: userdb fields weren't passed to auth-workers, so %{userdb:*}
+  from previous userdbs didn't work there.
+- auth: Fixed auth_bind=yes + sasl_bind=yes to work together
+- lmtp: %{userdb:*} variables didn't work in mail_log_prefix
+- Fixed writing >2GB to iostream-temp files (used by fs-compress,
+  fs-metawrap, doveadm-http)
+- fts-solr: Fixed searching multiple mailboxes
+- and more...
+
 * Mon Jul 04 2016 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.25-1
 - dovecot updated to 2.2.25
 - doveadm backup was sometimes deleting entire mailboxes unnecessarily.
diff --git a/sources b/sources
index 696c213..4112778 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-8f62ea76489c47c369cbbe0b19818448  dovecot-2.2.25.tar.gz
-27e47fb731f2948d6905b12b6184705f  dovecot-2.2-pigeonhole-0.4.14.tar.gz
+85bc42328de41d1eb8d6d3f1db666db8  dovecot-2.2.26.0.tar.gz
+e03eed707b39cffc4b2a82867de45d9c  dovecot-2.2-pigeonhole-0.4.16.tar.gz