diff --git a/git.spec b/git.spec
index bebca5a..cdcb9bd 100644
--- a/git.spec
+++ b/git.spec
@@ -84,8 +84,8 @@
 #global rcrev   .rc0
 
 Name:           git
-Version:        2.26.2
-Release:        1%{?rcrev}%{?dist}
+Version:        2.26.3
+Release:        2%{?rcrev}%{?dist}
 Summary:        Fast Version Control System
 License:        GPLv2
 URL:            https://git-scm.com/
@@ -1060,6 +1060,15 @@ rmdir --ignore-fail-on-non-empty "$testdir"
 %{?with_docs:%{_pkgdocdir}/git-svn.html}
 
 %changelog
+* Wed Mar 10 2021 Todd Zullinger <tmz@pobox.com> - 2.26.3-2
+- revert "revert to protocol v0 by default"
+
+* Tue Mar 09 2021 Todd Zullinger <tmz@pobox.com> - 2.26.3-1
+- update to 2.26.3 (CVE-2021-21300)
+
+* Fri May 29 2020 Todd Zullinger <tmz@pobox.com> - 2.26.2-2
+- revert to protocol v0 by default
+
 * Mon Apr 20 2020 Todd Zullinger <tmz@pobox.com> - 2.26.2-1
 - update to 2.26.2 (CVE-2020-11008)
 
diff --git a/sources b/sources
index 551ebf0..b6b1898 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (git-2.26.2.tar.xz) = 5d92d07b171c5cd6e89a29c1211c73c1c900cd51c74d690aebfb4a3d0e93b541b09b42b6d6a1a82f5c3d953096771f9a8605c63be139f559f58698c1a0eabcfc
-SHA512 (git-2.26.2.tar.sign) = c53a607eda0bf83bf3593e8d68b833ef3ee99976434a97def5dcc25f31e79ff3e79f832b61508509d43d3111df106dde80ff6c9f7ada34ae53e7b4da17b06ed7
+SHA512 (git-2.26.3.tar.xz) = a88f8ab156f12770590110b30da83631f19a349f3b7af25fd0a5e8f03c78daec0a4935e9a1a5637f100c147cc57fca4aa3386e18756a6382983e7baa7456e398
+SHA512 (git-2.26.3.tar.sign) = a1ece2c1f12832e9ae017e1d7d6930bb8db9a1b73e638dd2a443eb45d61a4c09e5a74a5de1a424bd1b988e8ec4ac00d84659ff8690593ffb069e42f5a07a1fb5