diff --git a/NEWS b/NEWS
index 08c2a673b..7a88bee97 100644
--- a/NEWS
+++ b/NEWS
@@ -11,7 +11,9 @@ strongswan-5.5.2
 - The new "tpm" libtpmtss plugin allows to use persistent private RSA and ECDSA
   keys bound to a TPM 2.0 for both IKE and TLS authentication. Using the
   TPM 2.0 object handle as keyid parameter, the pki --pub tool can extract
-  the public key from the TPM thereby replacing the aikpub2 tool.
+  the public key from the TPM thereby replacing the aikpub2 tool. In a similar
+  fashion pki --req can generate a PKCS#10 certificate request signed with
+  the TPM private key.
 
 - The pki tool gained support for generating certificates with the RFC 3779
   addrblock extension. The charon addrblock plugin now dynamically narrows
diff --git a/configure.ac b/configure.ac
index 24d067f57..f6103149b 100644
--- a/configure.ac
+++ b/configure.ac
@@ -19,7 +19,7 @@
 #  initialize & set some vars
 # ============================
 
-AC_INIT([strongSwan],[5.5.2dr5])
+AC_INIT([strongSwan],[5.5.2dr6])
 AM_INIT_AUTOMAKE(m4_esyscmd([
 	echo tar-ustar
 	echo subdir-objects
diff --git a/testing/testing.conf b/testing/testing.conf
index 645fedf4f..ba2519496 100644
--- a/testing/testing.conf
+++ b/testing/testing.conf
@@ -31,7 +31,7 @@ fi
 : ${KERNELPATCH=ha-4.4-abicompat.patch.bz2}
 
 # strongSwan version used in tests
-: ${SWANVERSION=5.5.2dr5}
+: ${SWANVERSION=5.5.2dr6}
 
 # Build directory where the guest kernel and images will be built
 : ${BUILDDIR=$TESTDIR/build}