diff --git a/_service b/_service
index 42c841e..895e3f2 100644
--- a/_service
+++ b/_service
@@ -4,7 +4,7 @@
     <param name="url">https://github.com/flatpak/flatpak.git</param>
     <param name="scm">git</param>
     <param name="versionformat">@PARENT_TAG@</param>
-    <param name="revision">refs/tags/1.6.3</param>
+    <param name="revision">refs/tags/1.6.4</param>
   </service>
   <service name="recompress" mode="disabled">
     <param name="file">*.tar</param>
diff --git a/flatpak-1.6.3.tar.xz b/flatpak-1.6.3.tar.xz
deleted file mode 100644
index 954be3a..0000000
--- a/flatpak-1.6.3.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:4757a3d7cdb938d5bf9ad04b662dd7d0915abbedf75cbaff5a1a34654ab01503
-size 991932
diff --git a/flatpak-1.6.4.tar.xz b/flatpak-1.6.4.tar.xz
new file mode 100644
index 0000000..2b6b1e5
--- /dev/null
+++ b/flatpak-1.6.4.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:55fe560a3f872a8e8c523e73d6ada288c94adf84145d39f91a1e524e0595fad0
+size 992464
diff --git a/flatpak.changes b/flatpak.changes
index 5638298..ac7948e 100644
--- a/flatpak.changes
+++ b/flatpak.changes
@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Thu Jun 25 21:10:14 UTC 2020 - Bjørn Lie <bjorn.lie@gmail.com>
+
+- Update to version 1.6.4:
+  + This release backports some of the OCI authenticator fixes from
+    the 1.7 series, and should now be able to host flatpak images
+    on e.g. docker hub.
+  + Other changes:
+    - Fix a use-after free in libflatpak.
+    - Don't list p2p downgrades in list of available updates.
+
 -------------------------------------------------------------------
 Tue Jun 16 02:21:39 UTC 2020 - Yifan Jiang <yfjiang@suse.com>
 
diff --git a/flatpak.spec b/flatpak.spec
index fcc3a83..eec6791 100644
--- a/flatpak.spec
+++ b/flatpak.spec
@@ -32,7 +32,7 @@
 
 %define libname libflatpak0
 Name:           flatpak
-Version:        1.6.3
+Version:        1.6.4
 Release:        0
 Summary:        OSTree based application bundles management
 License:        LGPL-2.1-or-later