diff --git a/sssd-2.6.2.tar.gz b/sssd-2.6.2.tar.gz
deleted file mode 100644
index 76f44ec..0000000
--- a/sssd-2.6.2.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:5f6b45d853b41aa30b851914c7b6a4a4d6d59f270081ef583bdb3a47c4a78bfd
-size 7598580
diff --git a/sssd-2.6.2.tar.gz.asc b/sssd-2.6.2.tar.gz.asc
deleted file mode 100644
index 04a7796..0000000
--- a/sssd-2.6.2.tar.gz.asc
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEEkwIBqrQt0ZRyELeDjXMmNRpyYhEFAmHEk+QACgkQjXMmNRpy
-YhHUoxAAr1W4aal74uK3bQrJR4eBOxNCqTlAllRs51nH2okBghmfgkHc40ylARmY
-KpNO/h0hohpQiz3gzcUiC0vpYvgcKSAAmv2MCYlnEQqZtGJDKJVYj/RKjvKCI1vx
-V85oTpp61hDm53P+KGrSx10QmCXvnOiD2TDxvuJ6ZLn5C/YGZroX4dg85QSsEyxQ
-ID1kHcclpgBU7RSmT1HDOUAW/2x/63kITK5YBnacgEt+sudj0LESVhsEJleIqq/y
-12gOazeQRMfW3lTxEvu7uqTmzNoxERgYeiQDsezA+5bhJHqeM5go+FN2jICdRnYg
-yby+F38TXtwfVqNqJATiHinudRO5dcW/GLdD7zQ0pJltrUOS1UxWqqUkpHEi5hpj
-9Je2Byd64c3Pg6xXbg4rkswszcP6J4wrzJEEGMvTdCMnezGFk9mUUF6ztZ8QSwr9
-1bSrQqHdAGfXDnthaZeF2ZZnAPTMtQl0Df/9/kwNpi8Cgir1U1AJGLM23TC47Bbl
-+VOiwj22GigEJWgvj1odjo+JjjLDgi+hIS3jaCHRadDovXBIdAhaUf+P84gx4uFE
-86gD65DrAXDlKV82xdDZJKHoiu6xE+krNseg5cpOFQzqFHFjM7ylFcqAQQbGAM0j
-LHpdxvgOda4efIGbG+AM5lChEzmJg1PpQ4G+0C0/t0TbR+34lIg=
-=lH57
------END PGP SIGNATURE-----
diff --git a/sssd-2.6.3.tar.gz b/sssd-2.6.3.tar.gz
new file mode 100644
index 0000000..05ccbda
--- /dev/null
+++ b/sssd-2.6.3.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:3dd820b3da90cddbcb1041ef3c16102d78aad9d8c9ab25630e0c14a2f8992b18
+size 7510020
diff --git a/sssd-2.6.3.tar.gz.asc b/sssd-2.6.3.tar.gz.asc
new file mode 100644
index 0000000..d1f623f
--- /dev/null
+++ b/sssd-2.6.3.tar.gz.asc
@@ -0,0 +1,2 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<Error><Code>AccessDenied</Code><Message>Request has expired</Message><X-Amz-Expires>300</X-Amz-Expires><Expires>2022-01-25T11:30:00Z</Expires><ServerTime>2022-01-25T11:30:00Z</ServerTime><RequestId>15TZKG3G72XDESAV</RequestId><HostId>y09aoL821sznwwaNbpvyaIav/P38pXhVlQisMYdJsjRH2tblwzFdcz+bZmYO9CqM1Z6B1nMR9Jw=</HostId></Error>
\ No newline at end of file
diff --git a/sssd.changes b/sssd.changes
index 76a0854..d7b6439 100644
--- a/sssd.changes
+++ b/sssd.changes
@@ -1,3 +1,22 @@
+-------------------------------------------------------------------
+Tue Jan 25 11:32:10 UTC 2022 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 2.6.3
+  * A regression introduced in sssd-2.6.2 in the IPA provider
+    that prevented users from login was fixed. Access control
+    always denied access because the selinux_child returned an
+    unexpected reply.
+  * A critical regression that prevented authentication of users
+    via AD and IPA providers was fixed. LDAP port was reused for
+    Kerberos communication and this provider would send
+    incomprehensible information to this port.
+  * When authenticating AD users, backtrace was triggered even
+    though everything was working correctly. This was caused by a
+    search in the global catalog. Servers from the global catalog
+    are filtered out of the list before writing the KDC info
+    file. With this fix, SSSD does not attempt to write to the
+    KDC info file when performing a GC lookup.
+
 -------------------------------------------------------------------
 Mon Jan 17 17:27:40 UTC 2022 - Jan Engelhardt <jengelh@inai.de>
 
diff --git a/sssd.spec b/sssd.spec
index edf9044..12b9f21 100644
--- a/sssd.spec
+++ b/sssd.spec
@@ -17,7 +17,7 @@
 
 
 Name:           sssd
-Version:        2.6.2
+Version:        2.6.3
 Release:        0
 Summary:        System Security Services Daemon
 License:        GPL-3.0-or-later and LGPL-3.0-or-later