diff --git a/.gitignore b/.gitignore
index f7d1be1..de14a88 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,4 @@
 /mujs-c1ad1ba.tar.gz
 /mujs-0827611.tar.gz
 /mujs-5c337af.tar.gz
+/mujs-a0ceaf5.tar.gz
diff --git a/mujs.spec b/mujs.spec
index 523fde5..983ff57 100644
--- a/mujs.spec
+++ b/mujs.spec
@@ -1,10 +1,10 @@
-%global codate 20160921
-%global cohash 5c337af
+%global codate 20161031
+%global cohash a0ceaf5
 %global checkout %{codate}git%{cohash}
 
 Name:           mujs
 Version:        0
-Release:        5.%{checkout}%{?dist}
+Release:        6.%{checkout}%{?dist}
 Summary:        An embeddable Javascript interpreter
 License:        AGPLv3+
 URL:            http://mujs.com/
@@ -15,6 +15,10 @@ URL:            http://mujs.com/
 # Or simply, for the latest release, run:
 #       make tarball
 Source0:        %{name}-%{cohash}.tar.gz
+BuildRequires:  coreutils
+BuildRequires:  gcc
+BuildRequires:  grep
+BuildRequires:  make
 
 %description
 MuJS is a lightweight Javascript interpreter designed for embedding in
@@ -50,6 +54,10 @@ make install DESTDIR=%{buildroot} prefix="%{_prefix}" libdir="%{_libdir}"
 %{_libdir}/lib%{name}.a
 
 %changelog
+* Wed Nov 16 2016 Petr Šabata <contyk@redhat.com> - 0-6.20161031gita0ceaf5
+- Include the latest upstream fixes
+- Fixes CVE-2016-9108, CVE-2016-9109, CVE-2016-9017 and CVE-2016-9294
+
 * Thu Sep 29 2016 Petr Šabata <contyk@redhat.com> - 0-5.20160921git5c337af
 - Update to the upstream master HEAD
 - Fixes CVE-2016-7563 and CVE-2016-7564
diff --git a/sources b/sources
index 3fd1849..6bd06eb 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-cb22362df39face250cfd593bfadf4f7  mujs-5c337af.tar.gz
+635580e309a91c64d4fde25fd75cc40b  mujs-a0ceaf5.tar.gz