diff --git a/.gitignore b/.gitignore
index 3361775..bfe7ad2 100644
--- a/.gitignore
+++ b/.gitignore
@@ -56,3 +56,4 @@
 /webkitgtk-2.16.0.tar.xz
 /webkitgtk-2.16.1.tar.xz
 /webkitgtk-2.16.2.tar.xz
+/webkitgtk-2.16.3.tar.xz
diff --git a/fedora-crypto-policy.patch b/fedora-crypto-policy.patch
index cb7c756..cee0eae 100644
--- a/fedora-crypto-policy.patch
+++ b/fedora-crypto-policy.patch
@@ -1,39 +1,24 @@
-From e583c6f7deb86406f7e0375c560503858f4831ca Mon Sep 17 00:00:00 2001
-From: Michael Catanzaro <mcatanzaro@igalia.com>
-Date: Sun, 19 Jun 2016 21:10:03 -0500
-Subject: [PATCH] https://fedoraproject.org/wiki/Packaging:CryptoPolicies
-
----
- Source/WebKit2/NetworkProcess/EntryPoint/unix/NetworkProcessMain.cpp | 2 +-
- Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp         | 2 +-
- 2 files changed, 2 insertions(+), 2 deletions(-)
-
-diff --git a/Source/WebKit2/NetworkProcess/EntryPoint/unix/NetworkProcessMain.cpp b/Source/WebKit2/NetworkProcess/EntryPoint/unix/NetworkProcessMain.cpp
-index b282e16..ed8bbbd 100644
---- a/Source/WebKit2/NetworkProcess/EntryPoint/unix/NetworkProcessMain.cpp
-+++ b/Source/WebKit2/NetworkProcess/EntryPoint/unix/NetworkProcessMain.cpp
+diff -up webkitgtk-2.17.3/Source/WebKit2/NetworkProcess/EntryPoint/unix/NetworkProcessMain.cpp.orig webkitgtk-2.17.3/Source/WebKit2/NetworkProcess/EntryPoint/unix/NetworkProcessMain.cpp
+--- webkitgtk-2.17.3/Source/WebKit2/NetworkProcess/EntryPoint/unix/NetworkProcessMain.cpp.orig	2017-05-22 11:25:38.492770258 +0200
++++ webkitgtk-2.17.3/Source/WebKit2/NetworkProcess/EntryPoint/unix/NetworkProcessMain.cpp	2017-05-22 11:25:57.212665811 +0200
 @@ -39,7 +39,7 @@ int main(int argc, char** argv)
      // overwrite this priority string if it's already set by the user.
      // https://bugzilla.gnome.org/show_bug.cgi?id=738633
      // WARNING: This needs to be KEPT IN SYNC with WebProcessMain.cpp.
--    setenv("G_TLS_GNUTLS_PRIORITY", "NORMAL:%COMPAT:%LATEST_RECORD_VERSION:!VERS-SSL3.0:!ARCFOUR-128", 0);
-+    setenv("G_TLS_GNUTLS_PRIORITY", "@SYSTEM:%COMPAT:%LATEST_RECORD_VERSION:!VERS-SSL3.0:!ARCFOUR-128", 0);
+-    setenv("G_TLS_GNUTLS_PRIORITY", "NORMAL:%COMPAT:!VERS-SSL3.0:!ARCFOUR-128", 0);
++    setenv("G_TLS_GNUTLS_PRIORITY", "@SYSTEM:%COMPAT:!VERS-SSL3.0:!ARCFOUR-128", 0);
  
      return NetworkProcessMainUnix(argc, argv);
  }
-diff --git a/Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp b/Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp
-index 5f45d01..2b34ead 100644
---- a/Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp
-+++ b/Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp
+diff -up webkitgtk-2.17.3/Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp.orig webkitgtk-2.17.3/Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp
+--- webkitgtk-2.17.3/Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp.orig	2017-05-22 11:26:12.941578052 +0200
++++ webkitgtk-2.17.3/Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp	2017-05-22 11:26:25.051510485 +0200
 @@ -39,7 +39,7 @@ int main(int argc, char** argv)
      // overwrite this priority string if it's already set by the user.
      // https://bugzilla.gnome.org/show_bug.cgi?id=738633
      // WARNING: This needs to be KEPT IN SYNC with WebProcessMain.cpp.
--    setenv("G_TLS_GNUTLS_PRIORITY", "NORMAL:%COMPAT:%LATEST_RECORD_VERSION:!VERS-SSL3.0:!ARCFOUR-128", 0);
-+    setenv("G_TLS_GNUTLS_PRIORITY", "@SYSTEM:%COMPAT:%LATEST_RECORD_VERSION:!VERS-SSL3.0:!ARCFOUR-128", 0);
+-    setenv("G_TLS_GNUTLS_PRIORITY", "NORMAL:%COMPAT:!VERS-SSL3.0:!ARCFOUR-128", 0);
++    setenv("G_TLS_GNUTLS_PRIORITY", "@SYSTEM:%COMPAT:!VERS-SSL3.0:!ARCFOUR-128", 0);
  
      return WebProcessMainUnix(argc, argv);
  }
--- 
-2.7.4
-
diff --git a/sources b/sources
index 4a3e943..3c4aac0 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (webkitgtk-2.16.2.tar.xz) = 0bd16f663dffd41d713a53e2186576c4a7c42e7f872605a1688c80e8b55408b5f96f1274a1fe24624b4974240e901df5b11d1ff27a03fa2d9950575f1260abc8
+SHA512 (webkitgtk-2.16.3.tar.xz) = 551367551ed1bceaf9c70269f229e97972706820c6ae2d4444bc6d8b0992d6de34a156f9c245813c1f1701ce54f5476a44512590acfa6cfd6e67663d94caa91e
diff --git a/webkitgtk4.spec b/webkitgtk4.spec
index f6a73b3..fe885c3 100644
--- a/webkitgtk4.spec
+++ b/webkitgtk4.spec
@@ -6,8 +6,8 @@
         cp -p %1 _license_files/$(echo '%1' | sed -e 's!/!.!g')
 
 Name:           webkitgtk4
-Version:        2.16.2
-Release:        2%{?dist}
+Version:        2.16.3
+Release:        1%{?dist}
 Summary:        GTK+ Web content engine library
 
 License:        LGPLv2
@@ -257,6 +257,9 @@ make %{?_smp_mflags} -C %{_target_platform}
 %{_datadir}/gtk-doc/html/webkitdomgtk-4.0/
 
 %changelog
+* Wed May 24 2017 Tomas Popela <tpopela@redhat.com> - 2.16.3-1
+- Update to 2.16.3
+
 * Mon May 15 2017 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.16.2-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_27_Mass_Rebuild