diff --git a/.gitignore b/.gitignore
index 6c1d93a..b1fd14f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,3 +8,4 @@
 /sssd-2.9.1.tar.gz
 /sssd-2.9.2.tar.gz
 /sssd-2.9.3.tar.gz
+/sssd-2.9.4.tar.gz
diff --git a/sources b/sources
index b54b9c3..e94222a 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (sssd-2.9.3.tar.gz) = e1c3e107c98ac2cbc4f38e435910ebd560464773e7e93c8982db37d1ccdf78bc5e3f514bbcd2aaae54074ca6197b2067531180b83ee8c0e7f94878a824834a21
+SHA512 (sssd-2.9.4.tar.gz) = 9546cf074628f32137b16ca0c763988785271124244b645d1e786762e8578f10d983793a29bffcc004b064452fe8d465476a3041688d2f3c11c2751fb5bec3e2
diff --git a/sssd.spec b/sssd.spec
index d53387f..6739559 100644
--- a/sssd.spec
+++ b/sssd.spec
@@ -18,8 +18,8 @@
 %global enable_systemtap_opt --enable-systemtap
 
 Name: sssd
-Version: 2.9.3
-Release: 2%{?dist}
+Version: 2.9.4
+Release: 1%{?dist}
 Group: Applications/System
 Summary: System Security Services Daemon
 License: GPLv3+
@@ -1212,6 +1212,18 @@ fi
 %systemd_postun_with_restart sssd.service
 
 %changelog
+* Sat Jan 13 2024 Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
+- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
+- Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache
+- Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP'
+- Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider')
+- Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest
+- Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf
+- Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8]
+- Resolves: RHEL-10721 - very bad performance when requesting service tickets
+- Resolves: RHEL-19011 - Invalid handling groups from child domain
+- Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8]
+
 * Mon Nov 13 2023 Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-2
 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10