diff --git a/.gitignore b/.gitignore
index a2893bf..f9cdef5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -20,3 +20,4 @@ gajim-0.13.4.tar.bz2
 /gajim-0.16.5.tar.bz2
 /gajim-0.16.6.tar.bz2
 /gajim-0.16.7.tar.bz2
+/gajim-0.16.8.tar.bz2
diff --git a/gajim.spec b/gajim.spec
index 00cfc8c..02dcfe9 100644
--- a/gajim.spec
+++ b/gajim.spec
@@ -2,7 +2,7 @@ Summary:	Jabber client written in PyGTK
 Name:		gajim
 %global		majorver 0.16
 #global		prever -rcX
-Version:	0.16.7
+Version:	0.16.8
 Release:	1%{?dist}
 License:	GPLv3
 URL:		https://gajim.org/
@@ -122,6 +122,10 @@ gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
 %{_datadir}/%{name}/src
 
 %changelog
+* Tue Jun 06 2017 Michal Schmidt <mschmidt@redhat.com> - 0.16.8-1
+- Upstream release 0.16.8. (#1458616)
+- Makes XEP-0146 Commands opt-in (CVE-2016-10376, #1456364)
+
 * Mon Feb 06 2017 Michal Schmidt <mschmidt@redhat.com> - 0.16.7-1
 - Upstream release 0.16.7. (#1418487)
 
diff --git a/sources b/sources
index 3fe8bb2..e9f8b44 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (gajim-0.16.7.tar.bz2) = e8538e00b2873fe594f965bb3773456236d6c03e269aa7fa321ccc434ff93de591a2a50f8483dc74718efde6fb6d41834597fe6f7dd3811ef9f412540bd00230
+SHA512 (gajim-0.16.8.tar.bz2) = 702917f5b81a5009177ad305a65398c3f8fc95e4666dbfb33ef569a7c2a494a8ea7c48133a1f8000337381b29fc63b917103e05f64686affaaedb8aa155ac0e0