diff --git a/openssh.spec b/openssh.spec
index cd13a08..1085896 100644
--- a/openssh.spec
+++ b/openssh.spec
@@ -66,7 +66,7 @@
 
 # Do not forget to bump pam_ssh_agent_auth release if you rewind the main package release to 1
 %global openssh_ver 7.5p1
-%global openssh_rel 5
+%global openssh_rel 6
 %global pam_ssh_agent_ver 0.10.3
 %global pam_ssh_agent_rel 2
 
@@ -763,12 +763,19 @@ getent passwd sshd >/dev/null || \
 %endif
 
 %changelog
+* Mon Sep 11 2017 Jakub Jelen <jjelen@redhat.com> - 7.5p1-6 + 0.10.3-2
+- Do not export KRBCCNAME if the default path is used (#1199363)
+- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1477636)
+- Add new GSSAPI kex algorithms with SHA-2, but leave them disabled for now
+- Enforce pam_sepermit for all logins in SSH (#1492313)
+- Remove pam_reauthorize, since it is not needed by cockpit anymore (#1492313)
+
 * Mon Aug 14 2017 Jakub Jelen <jjelen@redhat.com> - 7.5p1-5 + 0.10.3-2
 - Another less-intrusive approach to crypto policy (#1479271)
 
 * Tue Aug 01 2017 Jakub Jelen <jjelen@redhat.com> - 7.5p1-4 + 0.10.3-2
 - Remove SSH-1 subpackage for Fedora 27 (#1474942)
-- Follow system-wide crypto policy in server
+- Follow system-wide crypto policy in server (#1479271)
 
 * Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 7.5p1-3.1
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild