diff --git a/.gitignore b/.gitignore
index 99d3c37..4ff9ed3 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,2 @@
-/chrony-3.2.tar.gz
-/clknetsim-71dbbc.tar.gz
+/chrony-3.3.tar.gz
+/clknetsim-5b4d14.tar.gz
diff --git a/chrony.spec b/chrony.spec
index b39878e..b676262 100644
--- a/chrony.spec
+++ b/chrony.spec
@@ -1,9 +1,9 @@
 %global _hardened_build 1
-%global clknetsim_ver 71dbbc
+%global clknetsim_ver 5b4d14
 %bcond_without debug
 
 Name:           chrony
-Version:        3.2
+Version:        3.3
 Release:        1%{?dist}
 Summary:        An NTP client/server
 
@@ -66,7 +66,7 @@ md5sum -c <<-EOF | (! grep -v 'OK$')
         e473a9fab7fe200cacce3dca8b66290b  examples/chrony.conf.example2
         ba6bb05c50e03f6b5ab54a2b7914800d  examples/chrony.keys.example
         6a3178c4670de7de393d9365e2793740  examples/chrony.logrotate
-        27cbc940c94575de320dbd251cbb4514  examples/chrony.nm-dispatcher
+        63e0781f84e89ba6029d93ef0722c4ce  examples/chrony.nm-dispatcher
         a85246982a89910b1e2d3356b7d131d7  examples/chronyd.service
 EOF
 
@@ -181,6 +181,9 @@ getent passwd chrony > /dev/null || /usr/sbin/useradd -r -g chrony \
 %dir %attr(-,chrony,chrony) %{_localstatedir}/log/chrony
 
 %changelog
+* Wed Apr 04 2018 Miroslav Lichvar <mlichvar@redhat.com> 3.3-1
+- update to 3.3
+
 * Fri Sep 15 2017 Miroslav Lichvar <mlichvar@redhat.com> 3.2-1
 - update to 3.2
 - get TAI-UTC offset and leap seconds from tzdata by default
diff --git a/sources b/sources
index 18748af..ac6ced9 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (chrony-3.2.tar.gz) = 496af5bed91600f268c1a0fa577bb8c7785e485f78598b666829c674e94770c16548cec4289a2ae9d0a51191d2705eda00886cb6cccae3828aa201a49d4783a4
-SHA512 (clknetsim-71dbbc.tar.gz) = 626175a3e97b33eaa462cd8416d5da18f44750d74a73dc824b591573a30613e956275951fd9d5bc52e1092284b0d7a67a85179e89532fa41d4a74c97aa0c78ba
+SHA512 (chrony-3.3.tar.gz) = 36975d863599141e8e5b071d35cf67326b27f5b0da7ec942dbb4530377d10472b0729eea632e0702718b515cb2d5fd41a7eba158e6dade7f05adfb1bdffa5df0
+SHA512 (clknetsim-5b4d14.tar.gz) = 6fc12fec423af00bb7329ee903e49021d38285e891cdb855e2c48ebf335d4142cc742acce85f37a51f97ed33643ff54d9da9a1adf6365b8e5a719a409334020c