diff --git a/.gitignore b/.gitignore
index 39322c3..e0858d0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -10,3 +10,5 @@ libssh-0.4.4.tar.gz.asc
 /libssh-0.5.2.tar.gz.asc
 /libssh-0.5.3.tar.gz
 /libssh-0.5.3.tar.asc
+/libssh-0.5.4.tar.gz
+/libssh-0.5.4.tar.asc
diff --git a/libssh.spec b/libssh.spec
index 80426e5..5fcf7e6 100644
--- a/libssh.spec
+++ b/libssh.spec
@@ -1,5 +1,5 @@
 Name:           libssh
-Version:        0.5.3
+Version:        0.5.4
 Release:        1%{?dist}
 Summary:        A library implementing the SSH2 protocol (0xbadc0de version)
 
@@ -7,8 +7,8 @@ Group:          System Environment/Libraries
 License:        LGPLv2+
 #original URL:	http://0xbadc0de.be/?part=libssh
 URL:            http://www.libssh.org/
-Source0:        http://www.libssh.org/files/%{name}-%{version}.tar.gz
-Source1:        http://www.libssh.org/files/%{name}-%{version}.tar.asc
+Source0:        https://red.libssh.org/attachments/download/41/libssh-0.5.4.tar.gz
+Source1:        https://red.libssh.org/attachments/download/42/libssh-0.5.4.tar.asc
 BuildRoot:      %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX)
 
 BuildRequires:  openssl-devel
@@ -71,6 +71,10 @@ rm -rf $RPM_BUILD_ROOT
 %{_usr}/share/pkgconfig/*.pc
 
 %changelog
+* Wed Jan 23 2013 Petr Lautrbach <plautrba@redhat.com> 0.5.4-1
+- update to security 0.5.4 release
+- CVE-2013-0176 (#894407)
+
 * Tue Nov 20 2012 Petr Lautrbach <plautrba@redhat.com> 0.5.3-1
 - update to security 0.5.3 release (#878465)
 
diff --git a/sources b/sources
index 18d8cc3..6f6647d 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-9ad01838d3b89d98e900e0f6260a88cc  libssh-0.5.3.tar.gz
-cc696a6fe9aa3fd6ff9761438c6846c7  libssh-0.5.3.tar.asc
+b8b4e733c13dfabae33b2688ef82dacc  libssh-0.5.4.tar.gz
+210057766ea316dfef9119a06768320c  libssh-0.5.4.tar.asc