diff --git a/baselibs.conf b/baselibs.conf
index 22e0a35..b125802 100644
--- a/baselibs.conf
+++ b/baselibs.conf
@@ -1,4 +1,4 @@
 sssd
-  supplements "packageand(sssd:pam-<targettype>)"
-  supplements "packageand(sssd:glibc-<targettype>)"
-  -/usr/lib(64)?/*
+	supplements "packageand(sssd:pam-<targettype>)"
+	supplements "packageand(sssd:glibc-<targettype>)"
+	-/usr/lib(64)?/*
diff --git a/sssd-1.12.2.tar.gz b/sssd-1.12.2.tar.gz
deleted file mode 100644
index e2d6d31..0000000
--- a/sssd-1.12.2.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:55a06a191b2e2506b23f80cf3d15f58b8d94d1f5a1bc5dc77ccf010c0eaafa5d
-size 4149084
diff --git a/sssd-1.12.2.tar.gz.asc b/sssd-1.12.2.tar.gz.asc
deleted file mode 100644
index 0af3ab6..0000000
--- a/sssd-1.12.2.tar.gz.asc
+++ /dev/null
@@ -1,7 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1
-
-iEYEABECAAYFAlRFH8kACgkQHsardTLnvCXMOACeKY1jciw1hTsvG/aOYK3h0+N1
-1/QAniL6o+Rhb0HReZPsMGYlQv41MI2C
-=chdM
------END PGP SIGNATURE-----
diff --git a/sssd-1.12.3.tar.gz b/sssd-1.12.3.tar.gz
new file mode 100644
index 0000000..a33a6bd
--- /dev/null
+++ b/sssd-1.12.3.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5d32c41b7964e3a49e27c8e278daff70f4e1d0171c7f641ffb4e800724cabf42
+size 4198515
diff --git a/sssd-1.12.3.tar.gz.asc b/sssd-1.12.3.tar.gz.asc
new file mode 100644
index 0000000..6718431
--- /dev/null
+++ b/sssd-1.12.3.tar.gz.asc
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1
+
+iEYEABECAAYFAlSuve8ACgkQHsardTLnvCWtlwCfZGbXyMTjWgYK3gBCqEaSj92y
+67cAoKZZQEn1+pdNjxgZN+C1J02+2xJz
+=X5Ef
+-----END PGP SIGNATURE-----
diff --git a/sssd.changes b/sssd.changes
index cfbd912..41a374f 100644
--- a/sssd.changes
+++ b/sssd.changes
@@ -1,3 +1,20 @@
+-------------------------------------------------------------------
+Thu Jan  8 22:23:42 UTC 2015 - jengelh@inai.de
+
+- Update to new upstream release 1.12.3
+* SSSD now allows the IPA client to move from one ID view to
+  another after SSSD restart.
+* It is possible to apply ID views to IPA domains as well.
+  Previous SSSD versions only allowed views to be applied to AD
+  trusted domains.
+* Overriding SSH public keys is supported in this release.
+* Move semanage related functions to a separate library.
+
+-------------------------------------------------------------------
+Thu Jan  1 22:01:02 UTC 2015 - meissner@suse.com
+
+- build with PIE
+
 -------------------------------------------------------------------
 Mon Nov 10 00:37:00 UTC 2014 - Led <ledest@gmail.com>
 
diff --git a/sssd.spec b/sssd.spec
index b332b32..8bed6ac 100644
--- a/sssd.spec
+++ b/sssd.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package sssd
 #
-# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:           sssd
-Version:        1.12.2
+Version:        1.12.3
 Release:        0
 Summary:        System Security Services Daemon
 License:        GPL-3.0+ and LGPL-3.0+
@@ -346,6 +346,8 @@ export LDB_DIR="$(pkg-config ldb --variable=modulesdir)"
 export PATH="$PATH:/usr/sbin"
 
 autoreconf -fiv;
+export CFLAGS="%optflags -fPIE"
+export LDFLAGS="-pie"
 %configure \
     --with-crypto=libcrypto \
     --with-db-path="%dbpath" \
@@ -470,6 +472,7 @@ rm -f /var/lib/sss/db/*.ldb
 %_libdir/%name/libsss_child*
 %_libdir/%name/libsss_crypt*
 %_libdir/%name/libsss_debug*
+%_libdir/%name/libsss_semanage*
 %_libdir/%name/libsss_simple*
 %_libdir/%name/libsss_util*
 %dir %_libdir/%name/modules/