diff --git a/_service b/_service
index 2d4d771..9f50ba1 100644
--- a/_service
+++ b/_service
@@ -3,7 +3,7 @@
     <param name="url">https://github.com/anchore/syft</param>
     <param name="scm">git</param>
     <param name="exclude">.git</param>
-    <param name="revision">v0.63.0</param>
+    <param name="revision">v0.64.0</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="changesgenerate">enable</param>
     <param name="versionrewrite-pattern">v(.*)</param>
@@ -16,6 +16,6 @@
     <param name="compression">gz</param>
   </service>
   <service name="go_modules" mode="disabled">
-    <param name="archive">syft-0.63.0.tar.gz</param>
+    <param name="archive">syft-0.64.0.tar.gz</param>
   </service>
 </services>
diff --git a/_servicedata b/_servicedata
index 682a7ae..c933910 100644
--- a/_servicedata
+++ b/_servicedata
@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/anchore/syft</param>
-              <param name="changesrevision">23a3173c9f2461e5906d1b9e3ac20b4806d74777</param></service></servicedata>
\ No newline at end of file
+              <param name="changesrevision">e1e489a2849c8432781a7cb58b257fa935efa1cf</param></service></servicedata>
\ No newline at end of file
diff --git a/syft-0.63.0.tar.gz b/syft-0.63.0.tar.gz
deleted file mode 100644
index 97b3b99..0000000
--- a/syft-0.63.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:a372e4d953523dc2052f3b031eff9971b6e3f01a751395bd3268aed780a69186
-size 5487343
diff --git a/syft-0.64.0.tar.gz b/syft-0.64.0.tar.gz
new file mode 100644
index 0000000..2a4d467
--- /dev/null
+++ b/syft-0.64.0.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b51dc2cf75d80c0b63b518d2ed359ca5fa46fe1f45f07ceb7b9e269d6173022f
+size 5501227
diff --git a/syft.changes b/syft.changes
index 605c9a7..344ebe8 100644
--- a/syft.changes
+++ b/syft.changes
@@ -1,3 +1,19 @@
+-------------------------------------------------------------------
+Wed Jan 04 15:47:49 UTC 2023 - kastl@b1-systems.de
+
+- Update to version 0.64.0:
+  * fix: unicode output in cyclonedx-json format (#1420)
+  * fix: excessive go binary warnings (#1424)
+  * feat: update spdx format model to produce valid spdx json documents (#1418)
+  * clean package names in python parsers (#1417)
+  * docs: update schema name to 2.3 (#1416)
+  * feat: add h1digest when scanning go.mod (#1405)
+  * feat: Add license parsing for java (#1385)
+  * fix: cyclonedx component type for binaries (#1406)
+  * fix: openjdk detection pattern (#1415)
+  * bug: spdx checksum empty array; allow syft to generate SHA1 for spdx-tag-value documents (#1404)
+  * Add NetBSD support. (#1412)
+
 -------------------------------------------------------------------
 Fri Dec 16 12:37:58 UTC 2022 - kastl@b1-systems.de
 
diff --git a/syft.spec b/syft.spec
index 20ee97b..8ad31e4 100644
--- a/syft.spec
+++ b/syft.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package syft
 #
-# Copyright (c) 2022 SUSE LLC
+# Copyright (c) 2023 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -19,7 +19,7 @@
 %define __arch_install_post export NO_BRP_STRIP_DEBUG=true
 
 Name:           syft
-Version:        0.63.0
+Version:        0.64.0
 Release:        0
 Summary:        CLI tool and library for generating a Software Bill of Materials
 License:        Apache-2.0
diff --git a/vendor.tar.gz b/vendor.tar.gz
index 662b28f..1d85030 100644
--- a/vendor.tar.gz
+++ b/vendor.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:cb30bac63a8a5ce1bf5028189e446957243f24b5ea0428c6045977e7d52bc5af
-size 51481335
+oid sha256:1982d51ff8fa4315b8aa4cb0a75453a0284c0665fcefac4552f0737fa119fc86
+size 51481538