diff --git a/HISTORY.rst b/HISTORY.rst
index 9ba234f85..53663530a 100644
--- a/HISTORY.rst
+++ b/HISTORY.rst
@@ -2,6 +2,21 @@
 History / Changelog
 ===================
 
+-------
+v0.23.6
+-------
+
+End-User Summary
+================
+
+- Fixing problem with remote permission synchronization.
+
+Full Change List
+================
+
+- Bump sodar-core to hotfix version.
+  Fixes problem with remote permission synchronization.
+
 -------
 v0.23.5
 -------
diff --git a/requirements/base.txt b/requirements/base.txt
index dedc6cfe2..c1608185a 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -69,7 +69,7 @@ celery<4.2  # pyup: <4.2  # blocker: https://github.com/celery/celery/issues/487
 
 django-postgres-copy==2.3.5
 
--e git+https://github.com/bihealth/sodar_core.git@v0.9.1#egg=django-sodar-core
+-e git+https://github.com/bihealth/sodar_core.git@159ff602400182558fb5612c0c7cf13967fa1039#egg=django-sodar-core
 
 # Simplejson is more advanced than then built-in one.
 simplejson >=2.1