diff --git a/debian/changelog b/debian/changelog
index 0626638184..98d7e8dcb0 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,8 +1,18 @@
-gramine (1.6post~UNRELEASED) UNRELEASED; urgency=medium
-
-  *
-
- -- Wojtek Porczyk <woju@invisiblethingslab.com>  Mon, 11 Dec 2023 10:00:01 +0100
+gramine (1.6.1) bookworm bullseye jammy focal; urgency=medium
+
+  * version 1.6.1
+  * updated mbedtls to 3.5.2
+    (fixes CVE-2024-23170 and CVE-2024-23775)
+  * updated curl to 8.5.0
+    (fixes CVE-2023-46218 and CVE-2023-46219)
+  * update glibc to 2.39
+    (fixes CVE-2023-6246, CVE-2023-6779 and CVE-2023-6780)
+  * added sgx.insecure__allow_memfaults_without_exinfo manifest option as
+    a workaround for usability regression (custom signal handlers not working
+    on older Intel CPUs) caused by recent security hardening
+  * added performance and correctness fixes for Encrypted Files
+
+ -- Wojtek Porczyk <woju@invisiblethingslab.com>  Tue, 20 Feb 2024 13:00:00 +0100
 
 gramine (1.6) bookworm bullseye jammy focal; urgency=medium
 
diff --git a/gramine.spec b/gramine.spec
index a88200abd9..c7c27a0ee7 100644
--- a/gramine.spec
+++ b/gramine.spec
@@ -1,7 +1,7 @@
 # Copyright (c) 2021-2022 Wojtek Porczyk <woju@invisiblethingslab.com>
 
 Name: gramine
-Version: 1.6post~UNRELEASED
+Version: 1.6.1
 Release: 1%{?dist}
 Group: Development Tools
 Summary: A lightweight usermode guest OS designed to run a single Linux application
diff --git a/meson.build b/meson.build
index 8145a587b0..ebeaf50795 100644
--- a/meson.build
+++ b/meson.build
@@ -5,7 +5,7 @@
 project(
     'gramine',
     'c', 'cpp',
-    version: '1.6post~UNRELEASED',
+    version: '1.6.1',
     license: 'LGPLv3+',
 
     meson_version: '>=0.56',
diff --git a/packaging/alpine/APKBUILD b/packaging/alpine/APKBUILD
index b9259d7584..d6fcc28959 100644
--- a/packaging/alpine/APKBUILD
+++ b/packaging/alpine/APKBUILD
@@ -1,7 +1,7 @@
 # Contributor: Amie Raine <amie@invisiblethingslab.com>
 # Maintainer: Amie Raine <amie@invisiblethingslab.com>
 pkgname=gramine
-_real_pkgver=1.6post~UNRELEASED
+_real_pkgver=1.6.1
 pkgver=$(printf %s "$_real_pkgver" | sed \
     -e "s:post~UNRELEASED:_git$(printf %d 0x"$(git rev-parse HEAD 2>/dev/null | cut -c1-8)"):" \
     -e 's:~:_:' \