diff --git a/download b/download
index 071deea2843328acbd03ae4dda9b10c4361f2d2f..d3115922728d8885991b4717f8f981e045dacb05 100644
--- a/download
+++ b/download
@@ -1 +1 @@
-d12554828c11791cd3328848f508a331  skopeo-1.6.1-49084d2.tar.gz
+f2d559e81db55fee4681b4e05c650deb  release-1.6-1186cc6.tar.gz
diff --git a/skopeo.spec b/skopeo.spec
index 400e00901aa4b8d1d99484af1ecbc33e89a01346..8f9fccdc444c6ce96e23f54928edb3ce8c239c96 100644
--- a/skopeo.spec
+++ b/skopeo.spec
@@ -10,14 +10,15 @@ go build -buildmode pie -compiler gc -tags="rpm_crashtraceback libtrust_openssl
 %define gobuild(o:) GO111MODULE=off go build -buildmode pie -compiler gc -tags="rpm_crashtraceback ${BUILDTAGS:-}" -ldflags "${LDFLAGS:-} -B 0x$(head -c20 /dev/urandom|od -An -tx1|tr -d ' \\n') -extldflags '-Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld '" -a -v %{?**};
 %endif
 
+%global branch release-1.6
 %global import_path github.com/containers/%{name}
-%global commit0 49084d2cd8c9f8e7b38ba8405d61e701d5381bc0
+%global commit0 1186cc6bce235addb7345115c43aacea3cf6893a
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 Epoch: 2
 Name: skopeo
 Version: 1.6.1
-Release: 1%{?dist}
+Release: 2%{?dist}
 Summary: Inspect container images and repositories on registries
 License: ASL 2.0
 URL: https://%{import_path}
@@ -118,6 +119,10 @@ export GOPATH=%{buildroot}/%{gopath}:$(pwd)/vendor:%{gopath}
 %{_datadir}/%{name}/test
 
 %changelog
+* Fri Apr 01 2022 Jindrich Novy <jnovy@redhat.com> - 2:1.6.1-2
+- fix CVE-2022-21698
+- Related: #2068168
+
 * Thu Feb 17 2022 Jindrich Novy <jnovy@redhat.com> - 2:1.6.1-1
 - update to https://github.com/containers/skopeo/releases/tag/v1.6.1
 - Related: #2001445