diff --git a/.gitignore b/.gitignore
index c608894..bea49fb 100644
--- a/.gitignore
+++ b/.gitignore
@@ -48,3 +48,5 @@ libssh-0.4.4.tar.gz.asc
 /libssh-0.9.0.tar.xz.asc
 /libssh-0.9.2.tar.xz
 /libssh-0.9.2.tar.xz.asc
+/libssh-0.9.3.tar.xz
+/libssh-0.9.3.tar.xz.asc
diff --git a/libssh.spec b/libssh.spec
index a7d5c7f..06b3d01 100644
--- a/libssh.spec
+++ b/libssh.spec
@@ -1,5 +1,5 @@
 Name:           libssh
-Version:        0.9.2
+Version:        0.9.3
 Release:        1%{?dist}
 Summary:        A library implementing the SSH protocol
 License:        LGPLv2+
@@ -134,6 +134,10 @@ popd
 %attr(0644,root,root) %config(noreplace) %{_sysconfdir}/libssh/libssh_server.config
 
 %changelog
+* Tue Dec 10 2019 Andreas Schneider <asn@redhat.com> - 0.9.3-1
+- Update to version 0.9.3
+- resolves: #1781780 - Fixes CVE-2019-14889
+
 * Thu Nov 07 2019 Andreas Schneider <asn@redhat.com> - 0.9.2-1
 - Upate to version 0.9.2
 - resolves #1769370 - Remove the docs, they can be found on https://api.libssh.org/
diff --git a/sources b/sources
index b083764..ce9680c 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (libssh-0.9.2.tar.xz) = 93b689cd7f3bd32716d7821219e25f91214f71be3867c622ae0ae73cdb2d20af2daa9c3c8180b71434915154f2bc374df7193b3a67a9b9e8bf06e955419285d0
-SHA512 (libssh-0.9.2.tar.xz.asc) = 8868cb686e0af2b3751c751729ba5f5460989ad4d85cc51b634b2a7affb1e86043929f551876ae2f0e5d038bfe3d2633e73954a8f076ac26def5e3adf1012a11
+SHA512 (libssh-0.9.3.tar.xz) = 6e59718565daeca6d224426cc1095a112deff9af8e0b021917e04f08bb7409263c35724de95f591f38e26f0fb3bbbbc69b679b6775edc21dec158d241b076c6f
+SHA512 (libssh-0.9.3.tar.xz.asc) = 50d3a49274f1f1994451280b568e96144e60e926f9242182a9ff284671dba21c8a92640b2dee27948f2e33616903f16123b2e018a9cc281cf71d417c2715e1ad