diff --git a/.gitignore b/.gitignore
index 4281d26..0fa7a5c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,3 +8,4 @@ onig-5.9.2.tar.gz
 /onig-6.1.2.tar.gz
 /onig-6.1.3.tar.gz
 /onig-6.2.0.tar.gz
+/onig-6.3.0.tar.gz
diff --git a/oniguruma.spec b/oniguruma.spec
index ecba8ca..ee6a969 100644
--- a/oniguruma.spec
+++ b/oniguruma.spec
@@ -1,6 +1,6 @@
 Name:		oniguruma
-Version:	6.2.0
-Release:	2%{?dist}
+Version:	6.3.0
+Release:	1%{?dist}
 Summary:	Regular expressions library
 
 Group:		System Environment/Libraries
@@ -98,6 +98,10 @@ find $RPM_BUILD_ROOT -name '*.la' \
 %{_libdir}/pkgconfig/%{name}.pc	
 
 %changelog
+* Tue May 30 2017 Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.3.0-1
+- 6.3.0
+  - CVEs 2017-9226 CVE-2017-9225 CVE-2017-9224 CVE-2017-9227 CVE-2017-9229 CVE-2017-9228
+
 * Wed Apr 26 2017 Nils Philippsen <nils@redhat.com> - 6.2.0-2
 - remove unnecessary BR: ruby
 
diff --git a/sources b/sources
index 41f126c..aad1cc5 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (onig-6.2.0.tar.gz) = ecd460f4d051ceb743ce88ea1dc91b961cd79ac2453b08fc0803c722f2af9e1542876cc3a469f4245ed7470592de8036745b8e3bcb156a9380f262fab29b9d0b
+SHA512 (onig-6.3.0.tar.gz) = 980603696c2bb20efe5874fe9eb830d2c485eee5126d79b0799416da318158d79f4111409c8fc19e67b04d87ff088136d7e7be797e6380011426ec21bc2013bc