diff --git a/.gitignore b/.gitignore
index 86619c6..5b5a623 100644
--- a/.gitignore
+++ b/.gitignore
@@ -62,3 +62,5 @@ gnupg-2.0.16.tar.bz2.sig
 /gnupg-2.2.1.tar.bz2.sig
 /gnupg-2.2.2.tar.bz2
 /gnupg-2.2.2.tar.bz2.sig
+/gnupg-2.2.3.tar.bz2
+/gnupg-2.2.3.tar.bz2.sig
diff --git a/gnupg2.spec b/gnupg2.spec
index 1c472e5..5cb10db 100644
--- a/gnupg2.spec
+++ b/gnupg2.spec
@@ -1,7 +1,7 @@
 Summary: Utility for secure communication and data storage
 Name:    gnupg2
-Version: 2.2.2
-Release: 2%{?dist}
+Version: 2.2.3
+Release: 1%{?dist}
 
 License: GPLv3+
 Group:   Applications/System
@@ -212,6 +212,9 @@ fi
 
 
 %changelog
+* Tue Nov 21 2017 Tomáš Mráz <tmraz@redhat.com> - 2.2.3-1
+- upgrade to 2.2.3
+
 * Wed Nov  8 2017 Tomáš Mráz <tmraz@redhat.com> - 2.2.2-1
 - upgrade to 2.2.2
 
diff --git a/sources b/sources
index 22e8d47..e7a83ca 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (gnupg-2.2.2.tar.bz2) = 3a390b8da21bef0584f39fb8f4b86ec10c78efc64dd1634377b8637042db5f8da462f2881e12fa509b0322d71cba464e0400b91869a4b9fe6189daa4b1386cc1
-SHA512 (gnupg-2.2.2.tar.bz2.sig) = 9e3bdd6f205d1b160acbeb803bb490f2aaa4f818797f321c97d873830661b3165ec101dc7fb65e1e66dd1fb5367fd14a9a2f9830a97fdeaa59bcb8aa7aab42be
+SHA512 (gnupg-2.2.3.tar.bz2) = c73df3c6f7ce65bd9867a39d10f93548496bf596ba0901737fc0063b370fd2d834c0b912e5aa07ff31067bc9c1263acc9d314c6bfaf7c889b72c8d46087810cb
+SHA512 (gnupg-2.2.3.tar.bz2.sig) = cf5b7efad77ca855a0145171b55fc4a38a064b6914dc6ba6652ab5e373bcf4d3501569b673500eb8a038086a471af054e45c792ff2c12d57d08d2a7e36496bc7