diff --git a/.gitignore b/.gitignore
index a77f163..2a4361e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -27,3 +27,4 @@
 /libreswan-3.24.tar.gz
 /libreswan-3.25.tar.gz
 /libreswan-3.26.tar.gz
+/libreswan-3.27.tar.gz
diff --git a/libreswan.spec b/libreswan.spec
index 5c017e7..0c58dfa 100644
--- a/libreswan.spec
+++ b/libreswan.spec
@@ -29,8 +29,8 @@
 Name: libreswan
 Summary: IPsec implementation with IKEv1 and IKEv2 keying protocols
 # version is generated in the release script
-Version: 3.26
-Release: %{?prever:0.}3%{?prever:.%{prever}}%{?dist}
+Version: 3.27
+Release: %{?prever:0.}1%{?prever:.%{prever}}%{?dist}
 License: GPLv2
 Url: https://libreswan.org/
 Source0: https://download.libreswan.org/%{?prever:development/}%{name}-%{version}%{?prever}.tar.gz
@@ -40,8 +40,6 @@ Source2: https://download.libreswan.org/cavs/ikev1_psk.fax.bz2
 Source3: https://download.libreswan.org/cavs/ikev2.fax.bz2
 %endif
 
-Patch1: libreswan-3.26-asn1-zu.patch
-
 Requires(post): bash coreutils systemd
 Requires(preun): systemd
 Requires(postun): systemd
@@ -110,8 +108,6 @@ sed -i "s:#[ ]*include \(.*\)\(/crypto-policies/back-ends/libreswan.config\)$:in
 # linking to freebl is no longer needed
 sed -i "s/-lfreebl //" mk/config.mk
 
-%patch1 -p1
-
 %build
 %if 0%{with_efence}
 %global efence "-lefence"
@@ -217,6 +213,9 @@ export NSS_DISABLE_HW_GCM=1
 %{_libdir}/fipscheck/pluto.hmac
 
 %changelog
+* Mon Oct 08 2018 Paul Wouters <pwouters@redhat.com> - 3.27-1
+- Updated to 3.27 (various bugfixes)
+
 * Thu Sep 27 2018 Paul Wouters <pwouters@redhat.com> - 3.26-3
 - Add fedora python fixup for _unbound-hook
 
diff --git a/sources b/sources
index 9359c3a..140fe4e 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
 SHA512 (ikev1_dsa.fax.bz2) = 627cbac14248bd68e8d22fbca247668a7749ef0c2e41df8d776d62df9a21403d3a246c0bd82c3faedce62de90b9f91a87f753e17b056319000bba7d2038461ac
 SHA512 (ikev1_psk.fax.bz2) = 1b2daec32edc56b410c036db2688c92548a9bd9914994bc7e555b301dd6db4497a6b3e89dc12ddf36826ae90b40fcde501a5a45c0d59098e07839073d219d467
 SHA512 (ikev2.fax.bz2) = 0d3748d1bd574f6f1f3e4db847eca126ce649566ea710ef227426f433122752b80d1d6b8acf9d0df07b5597c1e45447e3a2fcb3391756e834e8e75f99df8e51e
-SHA512 (libreswan-3.26.tar.gz) = 10965a23197ef5d21a66dc0838066ceb620b2653f64471553284e0043fbc993584e497742b498e0be410427aeed3d8ce5bfdc6dfab59b8a1a1ba9a363473c4a4
+SHA512 (libreswan-3.27.tar.gz) = b92ecfd08b9d19dc801032176eff3dd07f625223d4f0dd07ff10f639644573430a55f7aebfcc8b9d2424e194ca9d06b17ad5a13dad5dc6f659d19bc5d32520f5