diff --git a/src/CHANGELOG b/src/CHANGELOG
index 599645c4..56a40f3e 100644
--- a/src/CHANGELOG
+++ b/src/CHANGELOG
@@ -1,3 +1,7 @@
+1.9.6.3
+ * Bug 17334: Move referrer spoofing for .onion domains into tor-browser.git
+ * Bug 17767: Make "JavaScript disabled" more visible in Security Slider
+
 1.9.6.2
  * Bug 18589: Clear site security settings during New Identity
  * Bug 19906: "Maximizing Tor Browser" Notification can exist multiple times
diff --git a/src/install.rdf b/src/install.rdf
index 59362990..3d0ee373 100644
--- a/src/install.rdf
+++ b/src/install.rdf
@@ -6,7 +6,7 @@
         <em:name>Torbutton</em:name>
         <em:creator>Mike Perry</em:creator>
         <em:id>torbutton@torproject.org</em:id>
-        <em:version>1.9.6.2</em:version>
+        <em:version>1.9.6.3</em:version>
         <em:homepageURL>https://www.torproject.org/projects/torbrowser.html.en</em:homepageURL>
         <em:optionsURL>chrome://torbutton/content/preferences.xul</em:optionsURL>
         <em:iconURL>chrome://torbutton/skin/tor.png</em:iconURL>