diff --git a/sources b/sources
index 2282147..e9d4b15 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (wavpack-5.3.0.tar.bz2) = 2c5038abfbe7ab3b51fb30b3fc8b636117e9afe1821c40832fbdfb960d1153e0cb4a68dd84a89b205c3cdc10030d3aa7a7340b296d9c148e8847471c2e7c0cd1
+SHA512 (wavpack-5.4.0.tar.bz2) = 6575c63c9309023ad4bd1711e2d7684ac6a5b61879514342b79f04453d7495e59592dc08d3de4d4cc6c64d6bdf56e361587d425f21fac084cb441fb70d83b6d8
diff --git a/wavpack.spec b/wavpack.spec
index 4dff4a1..da8bafe 100644
--- a/wavpack.spec
+++ b/wavpack.spec
@@ -1,7 +1,7 @@
 Name:		wavpack
 Summary:	A completely open audiocodec
-Version:	5.3.0
-Release:	2%{?dist}
+Version:	5.4.0
+Release:	1%{?dist}
 License:	BSD
 Url:		http://www.wavpack.com/
 Source:		http://www.wavpack.com/%{name}-%{version}.tar.bz2
@@ -66,6 +66,10 @@ rm -f %{buildroot}/%{_libdir}/*.la
 %doc ChangeLog doc/WavPack5PortingGuide.pdf doc/WavPack5LibraryDoc.pdf doc/WavPack5FileFormat.pdf
 
 %changelog
+* Sun Jan 17 2021 Sérgio Basto <sergio@serjux.com> - 5.4.0-1
+- Update wavpack to 5.4.0 (#1915740)
+- Security fix for CVE-2020-35738
+
 * Wed Jul 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 5.3.0-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild