diff --git a/cfengine-3.5.2.tar.gz b/cfengine-3.5.2.tar.gz
deleted file mode 100644
index 97e7576..0000000
--- a/cfengine-3.5.2.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:0362224d2968929cb4a1f2b4e98efbb6f5d1ecea5e9e9ae3e86fa8d083a70d6a
-size 1560750
diff --git a/cfengine-3.5.3.tar.gz b/cfengine-3.5.3.tar.gz
new file mode 100644
index 0000000..71f14be
--- /dev/null
+++ b/cfengine-3.5.3.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:0e2d13ba1d75f826bf15411912ce21075734796a35e8fb8ecf545d70d60f41e1
+size 1542468
diff --git a/cfengine.changes b/cfengine.changes
index a9963d5..eac90cd 100644
--- a/cfengine.changes
+++ b/cfengine.changes
@@ -1,3 +1,36 @@
+-------------------------------------------------------------------
+Tue Dec 10 13:04:00 UTC 2013 - kkaempf@suse.com
+
+- Update to 3.5.3
+  - Improved security checks of symlink ownership.
+    A symlink created by a user pointing to resources owned by a
+    different user will no longer be followed.
+  - Changed the way package versions are compared in package promises.
+    (Redmine #3314)
+    In previous versions the comparison was inconsistent. This has
+    been fixed, but may also lead to behavior changes in certain
+    cases. In CFEngine 3.5.3, the comparison works as follows:
+    <package-being-considered> <package_select> <package_version>
+    For instance: apache-2.2.31 ">=" "2.2.0" will result in the
+    package being installed.
+
+  Bug fixes:
+
+  - fix cf-monitord crash due to incorrect array initialization (Redmine
+    #3180)
+  - fix cf-serverd stat()'ing the file tree every second (Redmine #3479)
+  - correctly populate sys.hardware_addresses variable (Redmine #2936)
+  - add support for Debian's GNU/kfreebsd to build system (Redmine #3500)
+  - fix possible stack corruption in guest_environments promises (Redmine
+    #3552)
+  - work-around hostname trunctation in HP-UX's uname (Redmine #3517)
+  - fix body copy purging of empty directories (Redmine #3429)
+  - make discovery and loading of avahi libraries more robust
+  - compile and packaging fixes for HP-UX, AIX and Solaris
+  - fix fatal error in lsdir() when directory doesn't exist (Redmine
+    #3273)
+  - fix epoch calculation for stime inrange calculation (Redmine #2921)
+
 -------------------------------------------------------------------
 Fri Aug 30 12:58:49 UTC 2013 - kkaempf@suse.com
 
diff --git a/cfengine.spec b/cfengine.spec
index f342751..8e823c2 100644
--- a/cfengine.spec
+++ b/cfengine.spec
@@ -28,7 +28,7 @@ Name:           cfengine
 Summary:        CFEngine automates large-scale IT computing infrastructure
 License:        GPL-3.0
 Group:          Productivity/Networking/System
-Version:        3.5.2
+Version:        3.5.3
 Release:        0
 Url:            http://www.cfengine.org/
 Source:         %{name}-%{version}.tar.gz