diff --git a/sources b/sources
index 36c9fae..ab49b3f 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-ddbe1549dc27a260d28b47ad32eadd34  wordpress-3.6.tar.gz
+3f2c0b6f7f0626b5170a7b5df99d78b8  wordpress-3.6.1.tar.gz
diff --git a/wordpress.spec b/wordpress.spec
index e3d91c9..4e83f69 100644
--- a/wordpress.spec
+++ b/wordpress.spec
@@ -4,7 +4,7 @@
 Summary: Blog tool and publishing platform
 URL: http://www.wordpress.org
 Name: wordpress
-Version: 3.6
+Version: 3.6.1
 Group: Applications/Publishing
 #Release: 0.5.%{betatag}%{?dist}
 Release: 1%{?dist}
@@ -205,6 +205,10 @@ rm -rf ${RPM_BUILD_ROOT}
 %dir %{_sysconfdir}/wordpress
 
 %changelog
+* Thu Sep 12 2013 Paul Wouters <pwouters@redhat.com> - 3.6.1-1
+- update to 3.6.1, various bugs and security fixes:
+  CVE-2013-4338 CVE-2013-4339 CVE-2013-4340
+
 * Thu Aug 22 2013 Adam Williamson <awilliam@redhat.com> - 3.6.0-1
 - update to 3.6.0
 - drop pre-compiled Flash and Silverlight binaries - #1000267