diff --git a/.gitignore b/.gitignore
index 2b0a89c..18c4045 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,3 +4,5 @@
 /yara-3.6.0.tar.gz
 /yara-3.6.2.tar.gz
 /androguard-yara-3.6.2-e4cf5fa.tar.gz
+/androguard-yara-3.6.3-e4cf5fa.tar.gz
+/yara-3.6.3.tar.gz
diff --git a/sources b/sources
index b7cc700..27f542d 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (yara-3.6.2.tar.gz) = faccf36d207fa2577980bb261b63cf6f5d2e9efaa0dfadc3684cf161a0cbe15c670db75a2f60bfd47bad4c2c45b1733402e9900d30f3e02268aa6bb541cea32c
-SHA512 (androguard-yara-3.6.2-e4cf5fa.tar.gz) = 2769d1b1d9cb5f3677b53c953bbd397ef1f0de565758fb8c0929c74bd5a699585533f8b4c9b367a67c854c22a292edead58b2c4bdfe25b69f880c0f66f816955
+SHA512 (androguard-yara-3.6.3-e4cf5fa.tar.gz) = 2769d1b1d9cb5f3677b53c953bbd397ef1f0de565758fb8c0929c74bd5a699585533f8b4c9b367a67c854c22a292edead58b2c4bdfe25b69f880c0f66f816955
+SHA512 (yara-3.6.3.tar.gz) = f928fe93e93385b5711c1076b042473299e1eb1c7c345433b01b7638677d9b8fb95a8ac2a7ef52012dc178ec0ef5772d6b6d0b65b5717d2074290bb44031b3f8
diff --git a/yara.spec b/yara.spec
index 57156b5..11220e7 100644
--- a/yara.spec
+++ b/yara.spec
@@ -1,6 +1,7 @@
 %global         gituser         VirusTotal
 %global         gitname         yara
-%global         commit          1f519c7affff585df7cfd9243428005791fe9fc3
+#Commit of version 3.6.3
+%global         commit          06589f77ecfc6554f3a419255fe910ae3c503399
 %global         shortcommit     %(c=%{commit}; echo ${c:0:7})
 
 #additional module for yara
@@ -11,7 +12,7 @@
 
 
 Name:           yara
-Version:        3.6.2
+Version:        3.6.3
 Release:        1%{?dist}
 Summary:        Pattern matching Swiss knife for malware researchers
 Group:          Development/Libraries
@@ -156,6 +157,9 @@ rm -f %{buildroot}%{_datadir}/doc/%{name}/html/.buildinfo
 %doc docs/_build/html
 
 %changelog
+* Sun Jul 16 2017 Michal Ambroz <rebus at, seznam.cz> - 3.6.3-1
+- bump to 3.6.3 release - bugfix CVE-2017-11328
+
 * Mon Jul 03 2017 Michal Ambroz <rebus at, seznam.cz> - 3.6.2-1
 - bump to 3.6.2 release - bugfix CVE-2017-9304, CVE-2017-9465