diff --git a/unbound-1.6.2.tar.gz b/unbound-1.6.2.tar.gz
deleted file mode 100644
index e2b6f04..0000000
--- a/unbound-1.6.2.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:1a323d72c32180b7141c9e6ebf199fc68a0208dfebad4640cd2c4c27235e3b9c
-size 5378826
diff --git a/unbound-1.6.3.tar.gz b/unbound-1.6.3.tar.gz
new file mode 100644
index 0000000..86ff09e
--- /dev/null
+++ b/unbound-1.6.3.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4c7e655c1d0d2d133fdeb81bc1ab3aa5c155700f66c9f5fb53fa6a5c3ea9845f
+size 5381240
diff --git a/unbound.changes b/unbound.changes
index 3613bc8..c7b8d09 100644
--- a/unbound.changes
+++ b/unbound.changes
@@ -1,3 +1,13 @@
+-------------------------------------------------------------------
+Wed Jun 14 10:22:38 UTC 2017 - michael@stroeder.com
+
+- update to 1.6.3
+
+Bug Fixes
+- Fix #1280: Unbound fails assert when response from authoritative
+  contains malformed qname. When 0x20 caps-for-id is enabled, when
+  assertions are not enabled the malformed qname is handled correctly.
+
 -------------------------------------------------------------------
 Mon Apr 24 15:54:02 UTC 2017 - michael@stroeder.com
 
diff --git a/unbound.spec b/unbound.spec
index 88da1a7..11a785e 100644
--- a/unbound.spec
+++ b/unbound.spec
@@ -53,7 +53,7 @@
 %endif
 
 Name:           unbound
-Version:        1.6.2
+Version:        1.6.3
 Release:        0
 #
 #