diff --git a/NEWS b/NEWS
index fa3b094f181c4d0911a9a168451e65a6b78f2c84..64f74b2a01e2a5cff2a146f0dbc92270cc2a8efb 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,20 @@
+Knot DNS 2.4.3 (2017-04-11)
+===========================
+
+Improvements:
+-------------
+ - New 'journal-db-mode' optimization configuration option
+ - The default TSIG algorithm for utilities input is HMAC-SHA256
+ - Implemented sensible default EDNS(0) padding policy (Thanks to D. K. Gillmor)
+ - Added some more semantic checks on the knotc configuration operations
+
+Bugfixes:
+---------
+ - Missing 'zone' keyword in the YAML output
+ - Missing trailing dot in the keymgr DS owner output
+ - Journal logs 'invalid parameter' in several cases
+ - Some minor journal-related problems
+
 Knot DNS 2.4.2 (2017-03-23)
 ===========================
 
diff --git a/configure.ac b/configure.ac
index d65273d566d09009693002ba683b31a5b5f3e3e2..29a7c264fb336465e7a9c5de48e144afe8a608dd 100644
--- a/configure.ac
+++ b/configure.ac
@@ -4,7 +4,7 @@ AC_PREREQ([2.60])
 
 m4_define([knot_VERSION_MAJOR],2)dnl
 m4_define([knot_VERSION_MINOR],4)dnl
-m4_define([knot_VERSION_PATCH],2)dnl
+m4_define([knot_VERSION_PATCH],3)dnl
 m4_define([knot_VERSION_EXTRA],)dnl
 m4_define([knot_PKG_VERSION],[knot_VERSION_MAJOR.knot_VERSION_MINOR.knot_VERSION_PATCH]knot_VERSION_EXTRA)dnl