diff --git a/mapserver.spec b/mapserver.spec
index 9e8b0e1..44f87c2 100644
--- a/mapserver.spec
+++ b/mapserver.spec
@@ -1,5 +1,5 @@
 Name:           mapserver
-Version:        5.2.1
+Version:        5.4.0
 Release:        1
 License:        BSD
 Group:          Applications/GIS
@@ -266,6 +266,14 @@ rm -rf %{buildroot}
 %{_javadir}/*.jar
 
 %changelog
+* Wed May 06 2009 Stephan Holl <stephan.holl@intevation.de> 5.4.0
+- updated to new upstream version of mapserver 5.4.0 (see http://trac.osgeo.org/mapserver/browser/tags/rel-5-4-0/mapserver/HISTORY.TXT for a detailed description of the changes. 
+- This release fixes several security vulnerabilities:
+  http://trac.osgeo.org/mapserver/ticket/2939
+  http://trac.osgeo.org/mapserver/ticket/2941
+  http://trac.osgeo.org/mapserver/ticket/2942
+  http://trac.osgeo.org/mapserver/ticket/2943
+  http://trac.osgeo.org/mapserver/ticket/2944
 * Wed Dec 04 2008 Stephan Holl <stephan.holl@intevation.de> 5.2.1
 - updated to new upstream release of mapserver 5.2.1 (see http://trac.osgeo.org/mapserver/browser/tags/rel-5-2-1/mapserver/HISTORY.TXT for a detailed description of the changes
 * Wed Oct 22 2008 Stephan Holl <stephan.holl@intevation.de> 5.2.0