diff --git a/.gitignore b/.gitignore
index 42731b4..d9a89b4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,3 +4,4 @@ libgcrypt-1.4.4.tar.bz2
 /libgcrypt-1.5.3-hobbled.tar.xz
 /libgcrypt-1.6.1-hobbled.tar.xz
 /libgcrypt-1.6.2-hobbled.tar.xz
+/libgcrypt-1.6.3-hobbled.tar.xz
diff --git a/mingw-libgcrypt.spec b/mingw-libgcrypt.spec
index 9a04e35..db95618 100644
--- a/mingw-libgcrypt.spec
+++ b/mingw-libgcrypt.spec
@@ -3,7 +3,7 @@
 %define run_tests 0
 
 Name:           mingw-libgcrypt
-Version:        1.6.2
+Version:        1.6.3
 Release:        1%{?dist}
 Summary:        MinGW Windows gcrypt encryption library
 
@@ -183,6 +183,10 @@ rm $RPM_BUILD_ROOT%{mingw64_libdir}/libgcrypt.la
 
 
 %changelog
+* Fri Apr 24 2015 Erik van Pienbroek <epienbro@fedoraproject.org> - 1.6.3-1
+- Update to 1.6.3
+- Fixes CVE-2014-3591 CVE-2015-0837 (RHBZ #1198153 #1198156)
+
 * Tue Dec 23 2014 Erik van Pienbroek <epienbro@fedoraproject.org> - 1.6.2-1
 - Update to 1.6.2
 
diff --git a/sources b/sources
index d296f4f..04e70c5 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-e682099d3bf9cd13802e5a5e67a66544  libgcrypt-1.6.2-hobbled.tar.xz
+cbb7aa4b8c4c63f24e954fbf00e16335  libgcrypt-1.6.3-hobbled.tar.xz