diff --git a/sources b/sources
index 487dbad..c9e4858 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (xz-5.4.3.tar.xz) = 7252191339afb97fc6a00616b1a8b9f24247d3539e7dbffca2045954593ae3e20d59e34f24c03b1954c96fbfa9cc8a7fea2a6e501e837872f90e8cd8bb307bb5
-SHA512 (xz-5.4.3.tar.xz.sig) = cd5e0a786e4828f9e94361e29fd72ad6d0cd6891ff367925b4950b50b8bc7e0c10dc84299ef62078e0d368b2a078a65953b0080d21c42b522db3b948a999b0fc
+SHA512 (xz-5.4.4.tar.xz) = 2b233a924b82190ff15e970c5a4a59f1c53a0b39a96bde228c9dfc9b103b4a3e5888f5024da4834e180f6010620ff23caf9f7135a38724eb2c8d01bff7a9a9e1
+SHA512 (xz-5.4.4.tar.xz.sig) = dfe89d565e915e95ea6e83cbae8787ebb26b2d398d754f70370c2bfc732f7eb040a1fd963c6bd2a02c2d7fe0b420119e2cac919044dc8401726ba0074de0756d
diff --git a/xz.spec b/xz.spec
index f2dede4..0fc1124 100644
--- a/xz.spec
+++ b/xz.spec
@@ -5,8 +5,8 @@ Summary:	LZMA compression utilities
 Name:		xz
 # **PLEASE NOTE**: when bumping xz version, please rebuild
 # perl-Compress-Raw-Lzma, it has a strict xz version dep
-Version:	5.4.3
-Release:	2%{?dist}
+Version:	5.4.4
+Release:	1%{?dist}
 
 # Scripts xz{grep,diff,less,more} and symlinks (copied from gzip) are
 # GPLv2+, binaries are Public Domain (linked against LGPL getopt_long but its
@@ -15,8 +15,7 @@ License:	GPLv2+ and Public Domain
 # official upstream release
 Source0:	https://tukaani.org/%{name}/%{name}-%{version}.tar.xz
 Source1:	https://tukaani.org/%{name}/%{name}-%{version}.tar.xz.sig
-# https://tukaani.org/misc/jia_tan_pubkey.txt
-Source2:        jia_tan_pubkey.txt
+Source2:        https://tukaani.org/misc/jia_tan_pubkey.txt
 
 Source100:	colorxzgrep.sh
 Source101:	colorxzgrep.csh
@@ -171,6 +170,9 @@ LD_LIBRARY_PATH=$PWD/src/liblzma/.libs make check
 
 
 %changelog
+* Wed Aug 02 2023 Richard W.M. Jones <rjones@redhat.com> - 5.4.4-1
+- New version 5.4.4 (RHBZ#2228542)
+
 * Sat Jul 22 2023 Fedora Release Engineering <releng@fedoraproject.org> - 5.4.3-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild