diff --git a/.gitignore b/.gitignore
index 729ea68..c1f382e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,3 +3,4 @@ libmspack-0.0.20060920alpha.tar.gz
 /libmspack-0.3alpha.tar.gz
 /libmspack-0.4alpha.tar.gz
 /libmspack-0.5alpha.tar.gz
+/libmspack-0.6alpha.tar.gz
diff --git a/libmspack.spec b/libmspack.spec
index 1247861..d01ce51 100644
--- a/libmspack.spec
+++ b/libmspack.spec
@@ -1,6 +1,6 @@
 Name:           libmspack
-Version:        0.5
-Release:        0.10.alpha%{?dist}
+Version:        0.6
+Release:        0.1.alpha%{?dist}
 Summary:        Library for CAB and related files compression and decompression
 
 Group:          System Environment/Libraries
@@ -48,9 +48,6 @@ make %{?_smp_mflags}
 make install DESTDIR=$RPM_BUILD_ROOT INSTALL='install -p'
 rm $RPM_BUILD_ROOT%{_libdir}/libmspack.la
 
-# avoid conflict with expand from coreutils
-./libtool --mode=install install -D -p -m 755 test/expand $RPM_BUILD_ROOT%{_bindir}/msexpand
-
 iconv -f ISO_8859-1 -t utf8 ChangeLog --output Changelog.utf8
 touch -r ChangeLog Changelog.utf8
 mv Changelog.utf8 ChangeLog
@@ -69,17 +66,23 @@ popd
 
 %files
 %doc README TODO COPYING.LIB ChangeLog AUTHORS
+%{_bindir}/cabrip
+%{_bindir}/chmextract
 %{_bindir}/msexpand
-%{_libdir}/*.so.*
+%{_bindir}/oabextract
+%{_libdir}/%{name}.so.*
 
 %files devel
 %doc doc/html
-%{_includedir}/*
-%{_libdir}/*.so
+%{_includedir}/mspack.h
+%{_libdir}/%{name}.so
 %{_libdir}/pkgconfig/%{name}.pc
 
 
 %changelog
+* Tue Sep 19 2017 Dan Horák <dan[at]danny.cz> - 0.6-0.1.alpha
+- updated to 0.6alpha (fixes CVE-2017-6419 and CVE-2017-11423)
+
 * Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.5-0.10.alpha
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
 
diff --git a/sources b/sources
index 1eaf923..d7935b8 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-3aa3f6b9ef101463270c085478fda1da  libmspack-0.5alpha.tar.gz
+SHA512 (libmspack-0.6alpha.tar.gz) = 7ba4a584d335c2d703628a3c179bc0d323574632357cdfe04622f960dcc4ef970b5739799397b6802d44a312f7ed9d589b4be223facf044bbfdbfd76d9c7405d