diff --git a/.gitignore b/.gitignore
index 6a23e26..343af16 100644
--- a/.gitignore
+++ b/.gitignore
@@ -66,3 +66,4 @@
 /librepo-1.15.1.tar.gz
 /librepo-1.15.2.tar.gz
 /librepo-1.16.0.tar.gz
+/librepo-1.17.0.tar.gz
diff --git a/librepo.spec b/librepo.spec
index 9b322bb..b841423 100644
--- a/librepo.spec
+++ b/librepo.spec
@@ -10,15 +10,26 @@
 
 %if 0%{?fedora} >= 39
 %bcond_with use_gpgme
+%bcond_with use_selinux
 %else
 %bcond_without use_gpgme
+%bcond_without use_selinux
+%endif
+
+# Needs to match how gnupg2 is compiled
+%bcond_with run_gnupg_user_socket
+
+%if %{with use_gpgme} && %{with use_selinux}
+%global need_selinux 1
+%else
+%global need_selinux 0
 %endif
 
 %global dnf_conflict 2.8.8
 
 Name:           librepo
-Version:        1.16.0
-Release:        2%{?dist}
+Version:        1.17.0
+Release:        1%{?dist}
 Summary:        Repodata downloading library
 
 License:        LGPL-2.1-or-later
@@ -39,6 +50,9 @@ BuildRequires:  libattr-devel
 BuildRequires:  libcurl-devel >= %{libcurl_version}
 BuildRequires:  pkgconfig(libxml-2.0)
 BuildRequires:  pkgconfig(libcrypto)
+%if %{need_selinux}
+BuildRequires:  pkgconfig(libselinux)
+%endif
 BuildRequires:  pkgconfig(openssl)
 %if %{with zchunk}
 BuildRequires:  pkgconfig(zck) >= 0.9.11
@@ -78,7 +92,9 @@ Python 3 bindings for the librepo library.
 %build
 %cmake \
     -DWITH_ZCHUNK=%{?with_zchunk:ON}%{!?with_zchunk:OFF} \
-    -DUSE_GPGME=%{?with_use_gpgme:ON}%{!?with_use_gpgme:OFF}
+    -DUSE_GPGME=%{?with_use_gpgme:ON}%{!?with_use_gpgme:OFF} \
+    -DUSE_RUN_GNUPG_USER_SOCKET=%{?with_run_gnupg_user_socket:ON}%{!?with_run_gnupg_user_socket:OFF} \
+    -DENABLE_SELINUX=%{?need_selinux:ON}%{!?need_selinux:OFF}
 %cmake_build
 
 %check
@@ -108,6 +124,13 @@ Python 3 bindings for the librepo library.
 %{python3_sitearch}/%{name}/
 
 %changelog
+* Wed Oct 18 2023 Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
+- Update to 1.17.0
+- lr_gpg_check_signature: Forward PGP error messages from RPM
+- PGP: fix: Support importing binary public keys in librpm backend
+- PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
+- PGP: Set a default creation SELinux labels on GnuPG directories
+
 * Wed Sep 20 2023 Adam Williamson <awilliam@redhat.com> - 1.16.0-2
 - Rebuild with no changes for Bodhi reasons
 
diff --git a/sources b/sources
index 89bfe82..a86b65a 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (librepo-1.16.0.tar.gz) = 0ccae96fe4919e501e4da00f61e8fdd5a04a400d4317187b781104c4f9648a692c1f589a7cfa5f63a0b38594eb9b2fa0944e9dfbb9930d7462b93a7219d9784d
+SHA512 (librepo-1.17.0.tar.gz) = f14446774349545c1122c7d6b9e33a51f38b15a2071543d5e8562975cc7ef1d04b6ddebcf4acdb88ada843e4f9854e0ef792a4b65a4ace4d3d125532c5b92427