diff --git a/sssd-2.9.3.tar.gz b/sssd-2.9.3.tar.gz
deleted file mode 100644
index 4c22a6b..0000000
--- a/sssd-2.9.3.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:f96d5ea050973b4fca7cb0ddf99d1534ad614ab252244b4636beab9ac8aad500
-size 7979324
diff --git a/sssd-2.9.3.tar.gz.asc b/sssd-2.9.3.tar.gz.asc
deleted file mode 100644
index 3500f18..0000000
--- a/sssd-2.9.3.tar.gz.asc
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEEwTzQf/stsUCORXo809IbKRDPZ1kFAmVSBPAACgkQ09IbKRDP
-Z1nYnRAAihT4iIpsOSq6fh+0wup4cdw3iHQDs+aofCExGo3FHFHowSk1J15BYapu
-PKy5TTpHX6SuRFpjVvWRQzH/fU0le5sx/cPwRXdyul3P89Sb0e61FAL88xgyVB26
-BF0dSN3TdtsHEAnjxzHjXpCX8hJhOEI6jSEi6p3mOiKwK0NYbs67xycTclvwAS2i
-j7LNlFJXr+LCReBI9DYNxhC2FtdxEx5uAjMsInLmdfeDIu66sio5CtgO69TSrY0a
-NlxYGU6S9mdThJpel74g0pQ0UUlKklvQb6eMNDQPTHajRzdQr3M3A5cahs1jDSIF
-l+ivC79ZbAmwUN0VMSmRdQba2s8J2TYWmidO1HhEKKPw+8ymf2EZ6sTmuI6w4a0N
-tbZSKSfKHZOqjESdLsc6JfDkoslmwSin7xaiEUkotZjn8eBQa3uS4dKi40bgej7V
-j+U+wvfaNWJgHFg5PbRq8Fd8JI3Rq+Cmg9GHtdlh40uyI83R5e4CWsBUTWdGBne3
-M/o4eVuTwVg1HiG+CCRjkhIWrBO8zqufVusOQfndqrynk0x0kE+5WgAUSjPNGxjd
-Gb/jjny59mocTg4yqpExI4o2UFBWI4JUnA0e8E84B1LSaIohmiH3w+Bm4mJJ7zP5
-kpGuqD0uYrIEfmxdygsWFhe6HJNCemg27CiueP90N/JySozDzHA=
-=mJH6
------END PGP SIGNATURE-----
diff --git a/sssd-2.9.4.tar.gz b/sssd-2.9.4.tar.gz
new file mode 100644
index 0000000..0a322c4
--- /dev/null
+++ b/sssd-2.9.4.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:82b5ef80be47c96d518de26cfb440000f1bc6b9e3441a8393a007d21af316b18
+size 7982544
diff --git a/sssd-2.9.4.tar.gz.asc b/sssd-2.9.4.tar.gz.asc
new file mode 100644
index 0000000..a8c7ae1
--- /dev/null
+++ b/sssd-2.9.4.tar.gz.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=WO5g
+-----END PGP SIGNATURE-----
diff --git a/sssd.changes b/sssd.changes
index 351b6bf..2d24d37 100644
--- a/sssd.changes
+++ b/sssd.changes
@@ -1,3 +1,17 @@
+-------------------------------------------------------------------
+Fri Jan 12 14:02:10 UTC 2024 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 2.9.4
+  * Fixes a crash when PAM passkey processing incorrectly handles
+    non-passkey data.
+  * Fixed group membership handling when members are coming from
+    different forest domains and using ldap token groups is
+    prohibited.
+  * Files provider was erroneously taking into consideration
+    ``local_auth_policy`` config option, thus breaking smartcard
+    authentication of local user in setups that did not explicitly
+    specify this option. This is now fixed.
+
 -------------------------------------------------------------------
 Tue Nov 21 09:43:57 UTC 2023 - Samuel Cabrero <scabrero@suse.de>
 
diff --git a/sssd.spec b/sssd.spec
index 3c41453..924623f 100644
--- a/sssd.spec
+++ b/sssd.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package sssd
 #
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:           sssd
-Version:        2.9.3
+Version:        2.9.4
 Release:        0
 Summary:        System Security Services Daemon
 License:        GPL-3.0-or-later AND LGPL-3.0-or-later