diff --git a/.gitignore b/.gitignore
index 6aab67a..0e78767 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,5 @@
 SOURCES/git-2.39.1.tar.xz
 SOURCES/gpgkey-junio.asc
 /git-2.39.1.tar.xz
+/git-2.39.3.tar.xz
+/git-2.39.3.tar.sign
diff --git a/git.spec b/git.spec
index dc819ed..afe4ec8 100644
--- a/git.spec
+++ b/git.spec
@@ -92,7 +92,7 @@
 #global rcrev   .rc0
 
 Name:           git
-Version:        2.39.1
+Version:        2.39.3
 Release:        1%{?rcrev}%{?dist}
 Summary:        Fast Version Control System
 License:        GPLv2
@@ -1099,6 +1099,10 @@ rmdir --ignore-fail-on-non-empty "$testdir"
 %{?with_docs:%{_pkgdocdir}/git-svn.html}
 
 %changelog
+* Mon Jun 05 2023 Ondřej Pohořelský <opohorel@redhat.com> - 2.39.3-1
+- Update to 2.39.3
+- Resolves: rhbz#2188374, rhbz#2188366
+
 * Thu Jan 19 2023 Ondrej Pohorelsky <opohorel@redhat.com> - 2.39.1-1
 - Update to 2.39.1
 - Resolves: rhbz#2162064
diff --git a/sources b/sources
index c2694da..d58f6ee 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (git-2.39.1.tar.xz) = b1821a814947f01adf98206a7e9a01da9daa617b1192e8ef6968b05af8d874f028fb26b5f828a9c48f734ef2c276f4d23bdc898ba46fb7aaa96dbe68081037e9
-SHA512 (gpgkey-junio.asc) = 58fe3f60adb3571835bde15d8c870789568769a5400fbd1564d4d3bb8c610fe57d93b1f58ed4da82328c9af4f64222dc918f5357433440cb038dbb4afd233d58
+SHA512 (git-2.39.3.tar.xz) = ddd9f41df9d59aedaddb3a3cd551c105903b5f8c86455d4d05a8342920d67754b358b6ab0d6c10cca743b8e0e621baea16f71a9d6290f4d37297a9c45e8b3763
+SHA512 (git-2.39.3.tar.sign) = aeb123a7ed4537b58bf97ab46474a28c1f0390a024e37efca30044e4d0ae8b4ae6b65b747581913464fc8f6d23d43466db1b3a874cd41314eb35dbe6ebdc51f5