diff --git a/nginx-1.23.2.tar.gz b/nginx-1.23.2.tar.gz
deleted file mode 100644
index bf97584..0000000
--- a/nginx-1.23.2.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:a80cc272d3d72aaee70aa8b517b4862a635c0256790434dbfc4d618a999b0b46
-size 1108243
diff --git a/nginx-1.23.2.tar.gz.asc b/nginx-1.23.2.tar.gz.asc
deleted file mode 100644
index f21b242..0000000
--- a/nginx-1.23.2.tar.gz.asc
+++ /dev/null
@@ -1,14 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQHEBAABCAAuFiEEE8gqY7YDV2FW4wpOoOqYG2aw2WcFAmNPwSoQHGsucGF2bG92
-QGY1LmNvbQAKCRCg6pgbZrDZZ1WDDACZQADQTx/UoKYArnf2C/inL1Ogz/icfaHe
-Wy+r/x8NLZVCM34TTVQGLjdSAByOIf3Syj7vRdxv+pYTMOQj/qkdep/llrtSKs01
-eex0/ctiSZIgkBJMrqoZgRIbblo56mpion6axvk5fK7cKR76TvMm3Z7Sz8EMjMUu
-vCMP/PcIcvA3v6e/Y4tmL+d3vbgPqLrwMqYw0eQHWlU6+uaXxDAQ75URRm5BazMS
-OeueGQcD67m8gxmfRS4bOI7v+hVT7B+90bXwbpiVWK7sZ07a+AuUmx9OefGVBUOZ
-/ZfuijnGhFLIRJvvm/QfsRlkPFpwsxOOZINPLHb4NoODs7KBANVf0tKvRtTPXT2R
-8cJiiK8oGS65jtHyQnWgDe59DnmasMU3pwZxCMfKbfsayJ0LpyWOYu+4rruXmiAf
-PkKyJ0v9UqhDosuG1FSaoqI+hOm4r9RLZmZRDkEU2VF6AoKcQnDrv66wnfqhb2Qx
-vdvVPYygGl6e4HslpFtj7/v42Ib6USI=
-=uIfV
------END PGP SIGNATURE-----
diff --git a/nginx-1.23.3.tar.gz b/nginx-1.23.3.tar.gz
new file mode 100644
index 0000000..62b2634
--- /dev/null
+++ b/nginx-1.23.3.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:75cb5787dbb9fae18b14810f91cc4343f64ce4c24e27302136fb52498042ba54
+size 1108958
diff --git a/nginx-1.23.3.tar.gz.asc b/nginx-1.23.3.tar.gz.asc
new file mode 100644
index 0000000..0ce59c5
--- /dev/null
+++ b/nginx-1.23.3.tar.gz.asc
@@ -0,0 +1,14 @@
+-----BEGIN PGP SIGNATURE-----
+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+=fmvt
+-----END PGP SIGNATURE-----
diff --git a/nginx.changes b/nginx.changes
index c47bb6a..aa6ce2a 100644
--- a/nginx.changes
+++ b/nginx.changes
@@ -1,3 +1,17 @@
+-------------------------------------------------------------------
+Sat Dec 17 19:46:30 UTC 2022 - Michael Ströder <michael@stroeder.com>
+
+- Updated to 1.23.3
+  * Bugfix: an error might occur when reading PROXY protocol version 2
+    header with large number of TLVs.
+  * Bugfix: a segmentation fault might occur in a worker process if SSI
+    was used to process subrequests created by other modules.
+  * Workaround: when a hostname used in the "listen" directive resolves
+    to multiple addresses, nginx now ignores duplicates within these
+    addresses.
+  * Bugfix: nginx might hog CPU during unbuffered proxying if SSL
+    connections to backends were used.
+
 -------------------------------------------------------------------
 Wed Oct 19 14:06:29 UTC 2022 - Michael Ströder <michael@stroeder.com>
 
diff --git a/nginx.spec b/nginx.spec
index 87076ae..6267227 100644
--- a/nginx.spec
+++ b/nginx.spec
@@ -23,7 +23,7 @@
 %bcond_with    ngx_google_perftools
 #
 Name:           nginx
-Version:        1.23.2
+Version:        1.23.3
 Release:        0
 Summary:        A HTTP server and IMAP/POP3 proxy server
 License:        BSD-2-Clause