diff --git a/roundcubemail-1.6.2-complete.tar.gz b/roundcubemail-1.6.2-complete.tar.gz
deleted file mode 100644
index 2ce5373..0000000
--- a/roundcubemail-1.6.2-complete.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:c898307d95cc48418cf95517ef52b5b0088c50014f67a6ef815763428a8043f0
-size 6004046
diff --git a/roundcubemail-1.6.2-complete.tar.gz.asc b/roundcubemail-1.6.2-complete.tar.gz.asc
deleted file mode 100644
index 51bd108..0000000
--- a/roundcubemail-1.6.2-complete.tar.gz.asc
+++ /dev/null
@@ -1,17 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQJHBAABCgAxFiEEiXDjemmK93XYfVkNwpRqlgnNVrQFAmShDVUTHGRldnNAcm91
-bmRjdWJlLm5ldAAKCRDClGqWCc1WtIodEACLbuTe5xsx8+moFHW9zqEF/Vq+upbH
-ln7V1zISgQCQjg42rBBNK23I4jqqunL+bHVucngfqCu+flSNcQkIJAinHgv7x8EC
-FhEu6gKYvW8GmqtuqdvdSHj1yNH8ZvsRkIOBvGKVG/dyyVy3f7kTeqdgzsgewZLv
-klwxWtrFQejjcIHuIbK17nXxM3pvbHKpJ8H81lRtm22ERS5sgZrs+evyEmLeEBYD
-RpyENBZEH6lq21ZrOeMw42pSmaucukFax21mxXPFBGFVhK49f57M/Ka3NeneZQc1
-8ivLXe2o5K4PLM2SiXfmEbByQ/IUvffI3ucWHjcUlunos6Fap2Lc8ZTHIM2doRGy
-nzfMMlvL9vlOgufwlTpeV15KlBiUx3lrFT23AXrHmbmV3YheWFhWbsyv/YlWZyJ5
-SzbF4YRcuGhw0WQY4I00kGrmTzOdwd18C/bO6Oq2AE8ayTSNxsUkPxnZp3e3Sdci
-+lUccoH3Jp66Idbv3WNVGunZUm3jgixlWHL3pdOfGPecr3tyZ60CqfOq5JF1DZox
-zmorXXImdOug3MeLIOoG4+RwKDsTdsW4thmpxqraYlk1tOLGRYyheIXub7q1g1et
-0zK2Mjvn3CGcXNymITHCqBbsxX5Bq2qW3Y9kjgkwKGT7+jzDTsHYXLHqMmvyCxFI
-ENmHzMuTlH4ikg==
-=LdV7
------END PGP SIGNATURE-----
diff --git a/roundcubemail-1.6.3-complete.tar.gz b/roundcubemail-1.6.3-complete.tar.gz
new file mode 100644
index 0000000..cbd2dce
--- /dev/null
+++ b/roundcubemail-1.6.3-complete.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5e60ccd50f62fb00c43d335ec08a9bdafbf2bdd02552256cc4009908b39ad98f
+size 6026670
diff --git a/roundcubemail-1.6.3-complete.tar.gz.asc b/roundcubemail-1.6.3-complete.tar.gz.asc
new file mode 100644
index 0000000..07021d3
--- /dev/null
+++ b/roundcubemail-1.6.3-complete.tar.gz.asc
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+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+=thl1
+-----END PGP SIGNATURE-----
diff --git a/roundcubemail.changes b/roundcubemail.changes
index 8b4885a..b62e5c5 100644
--- a/roundcubemail.changes
+++ b/roundcubemail.changes
@@ -1,3 +1,33 @@
+-------------------------------------------------------------------
+Wed Sep 20 15:57:21 UTC 2023 - Alexander Bergmann <abergmann@suse.com>
+
+- update to 1.6.3 (bsc#1215433)
+  * Fix bug where installto.sh/update.sh scripts were removing some
+    essential options from the config file (#9051)
+  * Update jQuery-UI to version 1.13.2 (#9041)
+  * Fix regression that broke use_secure_urls feature (#9052)
+  * Fix potential PHP fatal error when opening a message with
+    message/rfc822 part (#8953)
+  * Fix bug where a duplicate <title> tag in HTML email could cause some
+    parts being cut off (#9029)
+  * Fix bug where a list of folders could have been sorted
+    incorrectly (#9057)
+  * Fix regression where LDAP addressbook 'filter' option was
+    ignored (#9061)
+  * Fix wrong order of a multi-folder search result when sorting by
+    size (#9065)
+  * Fix so install/update scripts do not require PEAR (#9037)
+  * Fix regression where some mail parts could have been decoded
+    incorrectly, or not at all (#9096)
+  * Fix handling of an error case in Cyrus IMAP BINARY FETCH, fallback to
+    non-binary FETCH (#9097)
+  * Fix PHP8 deprecation warning in the reconnect plugin (#9083)
+  * Fix "Show source" on mobile with x_frame_options = deny (#9084)
+  * Fix various PHP warnings (#9098)
+  * Fix deprecated use of ldap_connect() in password's ldap_simple driver (#9060)
+  * Fix cross-site scripting (XSS) vulnerability in handling of linkrefs
+    in plain text messages 
+
 -------------------------------------------------------------------
 Mon Jul  3 12:41:18 UTC 2023 - Lars Vogdt <lars@linux-schulserver.de>
 
diff --git a/roundcubemail.spec b/roundcubemail.spec
index 27fc792..b67a272 100644
--- a/roundcubemail.spec
+++ b/roundcubemail.spec
@@ -20,7 +20,7 @@
 %define roundcubeconfigpath %{_sysconfdir}/%{name}
 
 Name:           roundcubemail
-Version:        1.6.2
+Version:        1.6.3
 Release:        0
 Summary:        A browser-based multilingual IMAP client
 License:        BSD-3-Clause AND GPL-2.0-only AND GPL-3.0-or-later