diff --git a/python-pyasn1.spec b/python-pyasn1.spec
index 6c2a5e7..e17fcac 100644
--- a/python-pyasn1.spec
+++ b/python-pyasn1.spec
@@ -2,7 +2,7 @@
 %global modules_version 0.4.2
 
 Name:           python-pyasn1
-Version:        0.6.3
+Version:        0.6.4
 Release:        1%{?dist}
 Summary:        ASN.1 tools for Python
 License:        BSD-2-Clause
@@ -90,6 +90,13 @@ PYTHONPATH=%{buildroot}%{python3_sitelib} %{__python3} -m tests
 %doc docs/build/html/*
 
 %changelog
+* Thu Jul 16 2026 Simon Pichugin <spichugi@redhat.com> - 0.6.4-1
+- Update to 0.6.4
+- Fixed quadratic complexity in OID/RELATIVE-OID decoders (CVE-2026-59885)
+- Limited BER/CER/DER long-form tag IDs to 20 octets (CVE-2026-59884)
+- Fixed excessive resource use in Real.__float__() (CVE-2026-59886)
+- Resolves: RHEL-211094
+
 * Fri Apr 24 2026 Simon Pichugin <spichugi@redhat.com> - 0.6.3-1
 - Update to 0.6.3
 - Update License to BSD-2-Clause to match upstream SPDX identifier
diff --git a/sources b/sources
index d571d22..aa029cd 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (v0.6.3.tar.gz) = c58962b3f11f486da3e73c09dbe2aff7500879b29c4a7be4295878e4edbcaaa2680d608720ad5af86a2457de7da50471ab7a9e925f717db5c467553fc552e6d6
 SHA512 (v0.4.2.tar.gz) = 7c4feab23a8c5ab72549387586894d1d53a3ad8b9d12cc5774b1d1f5192873f87da2e3525059fdda5b5884a52908ce79df274e3b75ee1f42af32e83ceb3f9167
+SHA512 (v0.6.4.tar.gz) = ce04b28d42d41fc8fa20608b773bf6691b46427f73f3fc3fb1a81c06996133bd77dcb2b4f6ba8213e27222d4203adc90adf64eeb7096ec82bc7df6e2f307657d
diff --git a/tests/tests.yml b/tests/tests.yml
index 6d8632c..ed3f91f 100644
--- a/tests/tests.yml
+++ b/tests/tests.yml
@@ -16,7 +16,7 @@
     tests:
     - unittests-pyasn1:
         # Must match the unpacked tarball directory name from this SRPM (see sources / spec Version).
-        dir: "source/pyasn1-0.6.3"
+        dir: "source/pyasn1-0.6.4"
         run: >-
             rm -rf pyasn1 &&
             python3 -m tests