diff --git a/.gitignore b/.gitignore
index eb9ac9b..26ffc74 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1,2 @@
 /logrotate-3.14.0.tar.xz
+/0006-logrotate-3.14.0-stricter-config-parser.patch
diff --git a/logrotate.spec b/logrotate.spec
index 91b5045..83544f6 100644
--- a/logrotate.spec
+++ b/logrotate.spec
@@ -1,7 +1,7 @@
 Summary: Rotates, compresses, removes and mails system log files
 Name: logrotate
 Version: 3.14.0
-Release: 5%{?dist}
+Release: 6%{?dist}
 License: GPLv2+
 Url: https://github.com/logrotate/logrotate
 Source: https://github.com/logrotate/logrotate/releases/download/%{version}/logrotate-%{version}.tar.xz
@@ -31,6 +31,9 @@ Patch4:   0004-logrotate-3.14.0-man-page-su.patch
 # create /var/log/btmp with mode 0660 (#2061561)
 Patch5:   0005-logrotate-3.14.0-btmp-create-mode.patch
 
+# enforce stricter parsing of config files (#2148925)
+Patch6:   0006-logrotate-3.14.0-stricter-config-parser.patch
+
 %description
 The logrotate utility is designed to simplify the administration of
 log files on a system which generates a lot of log files.  Logrotate
@@ -116,6 +119,9 @@ fi
 %config(noreplace) %{_sysconfdir}/rwtab.d/logrotate
 
 %changelog
+* Tue Dec 20 2022 Kamil Dudka <kdudka@redhat.com> - 3.14.0-6
+- enforce stricter parsing of config files (#2148925)
+
 * Mon Nov 14 2022 Kamil Dudka <kdudka@redhat.com> - 3.14.0-5
 - create /var/log/btmp with mode 0660 (#2061561)
 
diff --git a/sources b/sources
index c1ae699..b59e49a 100644
--- a/sources
+++ b/sources
@@ -1 +1,2 @@
+SHA512 (0006-logrotate-3.14.0-stricter-config-parser.patch) = f2bf08ce3f4c5ac48f2008eee65ce605f41ca69ff8b1baf1e6166f70310a3d1534c8aa1f91e36b216aee8d06175d73e74669b17f9c1fa9e04c04c7cc7e49ec9b
 SHA512 (logrotate-3.14.0.tar.xz) = f6de24b4d9eba958a95487fd397302db32334e8e1cb7b503ceb187546fa9cefa4bdac63c0ac906a73fb7f98bf874ff6a7e6db76637cbc42bc8a22be60bec8c58