diff --git a/.gitignore b/.gitignore
index b7f9553..c9793de 100644
--- a/.gitignore
+++ b/.gitignore
@@ -104,3 +104,4 @@ sssd-1.2.91.tar.gz
 /sssd-2.9.1.tar.gz
 /sssd-2.9.2.tar.gz
 /sssd-2.9.3.tar.gz
+/sssd-2.9.4.tar.gz
diff --git a/sources b/sources
index b54b9c3..e94222a 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (sssd-2.9.3.tar.gz) = e1c3e107c98ac2cbc4f38e435910ebd560464773e7e93c8982db37d1ccdf78bc5e3f514bbcd2aaae54074ca6197b2067531180b83ee8c0e7f94878a824834a21
+SHA512 (sssd-2.9.4.tar.gz) = 9546cf074628f32137b16ca0c763988785271124244b645d1e786762e8578f10d983793a29bffcc004b064452fe8d465476a3041688d2f3c11c2751fb5bec3e2
diff --git a/sssd.spec b/sssd.spec
index 5e5345f..ccdd569 100644
--- a/sssd.spec
+++ b/sssd.spec
@@ -26,8 +26,8 @@
 %global samba_package_version %(rpm -q samba-devel --queryformat %{version}-%{release})
 
 Name: sssd
-Version: 2.9.3
-Release: 2%{?dist}
+Version: 2.9.4
+Release: 1%{?dist}
 Summary: System Security Services Daemon
 License: GPLv3+
 URL: https://github.com/SSSD/sssd/
@@ -1084,6 +1084,13 @@ fi
 %systemd_postun_with_restart sssd.service
 
 %changelog
+* Fri Jan 12 2024 Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
+- Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
+- Resolves: RHEL-18395 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users
+- Resolves: RHEL-17498 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') [rhel-9]
+- Resolves: RHEL-21079 - SSSD GPO lacks group resolution on hosts [rhel-9]
+- Resolves: RHEL-19211 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [rhel-9]
+
 * Mon Nov 13 2023 Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-2
 - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4