diff --git a/.gitignore b/.gitignore
index 3907163..d77b0c1 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,3 +3,4 @@ libgcrypt-1.4.5-hobbled.tar.bz2
 /libgcrypt-1.5.0-hobbled.tar.bz2
 /libgcrypt-1.5.1-hobbled.tar.xz
 /libgcrypt-1.5.2-hobbled.tar.xz
+/libgcrypt-1.5.3-hobbled.tar.xz
diff --git a/libgcrypt.spec b/libgcrypt.spec
index 4efb4d4..6aca195 100644
--- a/libgcrypt.spec
+++ b/libgcrypt.spec
@@ -1,6 +1,6 @@
 Name: libgcrypt
-Version: 1.5.2
-Release: 3%{?dist}
+Version: 1.5.3
+Release: 1%{?dist}
 URL: http://www.gnupg.org/
 Source0: libgcrypt-%{version}-hobbled.tar.xz
 # The original libgcrypt sources now contain potentially patented ECC
@@ -174,6 +174,9 @@ exit 0
 %doc COPYING
 
 %changelog
+* Fri Jul 26 2013 Tomáš Mráz <tmraz@redhat.com> 1.5.3-1
+- new upstream version fixing cache side-channel attack on RSA private keys
+
 * Thu Jun 20 2013 Tomáš Mráz <tmraz@redhat.com> 1.5.2-3
 - silence false error detected by valgrind (#968288)
 
diff --git a/sources b/sources
index ea4f3a4..4838fbc 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-2a60d011ddc880cfd0d1da8eaec228a5  libgcrypt-1.5.2-hobbled.tar.xz
+99e0f2dc94dac6eceab709d03d613328  libgcrypt-1.5.3-hobbled.tar.xz