diff --git a/.gitignore b/.gitignore
index 930c575..2a062af 100644
--- a/.gitignore
+++ b/.gitignore
@@ -82,3 +82,4 @@
 /fwupd-1.6.1.tar.xz
 /fwupd-1.6.2.tar.xz
 /fwupd-1.6.3.tar.xz
+/fwupd-1.6.4.tar.xz
diff --git a/fwupd.spec b/fwupd.spec
index 525a2e5..661ca32 100644
--- a/fwupd.spec
+++ b/fwupd.spec
@@ -43,7 +43,7 @@
 
 Summary:   Firmware update daemon
 Name:      fwupd
-Version:   1.6.3
+Version:   1.6.4
 Release:   1%{?dist}
 License:   LGPLv2+
 URL:       https://github.com/fwupd/fwupd
@@ -482,6 +482,14 @@ done
 %endif
 
 %changelog
+* Fri Sep 24 2021 Richard Hughes <richard@hughsie.com> 1.6.4-1
+- New upstream release
+- Abort on invalid SREC files early to avoid a fuzzing timeout
+- Allow overriding the quirks directory at runtime
+- Fix a regression in flashing the Dell dock
+- Fix probing the Dell TPM
+- Show HSiLevel=0 attributes in JSON security output
+
 * Tue Aug 10 2021 Richard Hughes <richard@hughsie.com> 1.6.3-1
 - New upstream release
 - Disable the uefi_capsule plugin if Redfish coldplug succeeded
diff --git a/sources b/sources
index bbfd65e..7e466f6 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (fwupd-1.6.3.tar.xz) = 407a6ffccd53d36b6122859edeb597397feb83c8c3422e505a691d41348705e1dadfaa748bb18b12d25a6d52541a62397a2569ca3c34cf1bc39b61a70693433d
+SHA512 (fwupd-1.6.4.tar.xz) = f31ee47b9f8503e45b9fe27c4fb04cc545243010350fedc0c440aa4b53d91cd90e7869f1c7997dfc3ca3105ffceabce35c8c39b58ffd54150e6eab6a64f6cbc9