diff --git a/KeePass-2.53.1-Source.zip b/KeePass-2.53.1-Source.zip
deleted file mode 100644
index 7ca9b0c..0000000
--- a/KeePass-2.53.1-Source.zip
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:47b296c65c6b865e799ce683358c00fdc24997e91de59632e9e655ab2af1c673
-size 5202942
diff --git a/KeePass-2.53.1-Source.zip.asc b/KeePass-2.53.1-Source.zip.asc
deleted file mode 100644
index 0ec917c..0000000
--- a/KeePass-2.53.1-Source.zip.asc
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEE2VBEKD7pSNkR6LYGpPdi3FjG+Y4FAmPjk6UACgkQpPdi3FjG
-+Y4oFRAAjLBJOEK9eRI8QUEzv1Qqjzukvc3mIh9NOPKeM0WOnoD3bFi0WN37RrBw
-/90UetaXxg+0CMpJ456H2Z/A0YAZ5/J49Sz1aCBflkaJ6+WwKwQPzk3OrmUJ522e
-EcDuaMd9b4MhQypeQEfhhoZxr/usM3o2QPzNSJVSYeO6y08L2PWohhH4KRahv9ZP
-cnQG5NXys1l93aLDBqyC2BLTL0Vkc3GtYHfBRj9qJmtfKbnSdGsJUK0nDRXL7vgM
-06cU+p10pn6xU0y9WzKEh+VQjsV357m+3s6jlGGTJ5e1QOWZag7TiO+XvJHWiJ/Y
-c0YJ4hGhuV/DSs5k9mUp+HHZZ5D7hDSRCdMO+3bWFaewP2Nu7QkvObQTVOq614NB
-rWrm8Rj+T/icKl29fH6HKzXzgfMeBCWd48cpgNbtIChk5rS1v/EQnGWrMaPzop5/
-ZzWvbgRSe7XuRGTqxZgwfEv8FwZyTbCfWpWUDxmg1BDfHrdJjpPObFONdo55KWjc
-dE+KlB6t3mtaYZDKdbCmlrhJYDoWMC0YQvjMVwl3Y9gvNUx2MyvjdMRWC2+ku63C
-KE5H6Rp9g06V+dVU7XDwugoODZhQqzevHpmNSIE64hBWCvS1VU0kgTzMxAl1mguO
-+bsKKkfnCeXNJlBjMN6l2PJ+2SqsF17Cb9TXgKDptQyyEZg4N9c=
-=FnIB
------END PGP SIGNATURE-----
diff --git a/KeePass-2.54-Source.zip b/KeePass-2.54-Source.zip
new file mode 100644
index 0000000..8513f2d
--- /dev/null
+++ b/KeePass-2.54-Source.zip
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:7c35d3e17c6825f3d5f2d53cb8bf786e72ffff32a5bd7192f44ccd96ce769098
+size 5210324
diff --git a/KeePass-2.54-Source.zip.asc b/KeePass-2.54-Source.zip.asc
new file mode 100644
index 0000000..49f0beb
--- /dev/null
+++ b/KeePass-2.54-Source.zip.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=sAhG
+-----END PGP SIGNATURE-----
diff --git a/keepass.changes b/keepass.changes
index 678eb64..891c2f2 100644
--- a/keepass.changes
+++ b/keepass.changes
@@ -1,3 +1,28 @@
+-------------------------------------------------------------------
+Mon Jun  5 19:48:48 UTC 2023 - Matthias Bach <marix@marix.org> - 2.54
+
+- Update to 2.54
+  * Security:
+    + Improved process memory protection of secure edit controls (CVE-2023-32784, boo#1211397).
+  * New Features:
+    + Triggers, global URL overrides, password generator profiles and a few more settings are now stored in the enforced configuration file.
+    + Added dialog 'Enforce Options (All Users)' (menu 'Tools' → 'Advanced Tools' → 'Enforce Options'), which facilitates storing certain options in the enforced configuration file.
+    + In report dialogs, passwords (and other sensitive data) are now hidden using asterisks by default (if hiding is activated in the main window); the hiding can be toggled using the new '***' button in the toolbar.
+    + The 'Print' command in most report dialogs now requires the 'Print' application policy flag, and the master key must be entered if the 'Print - No Key Repeat' application policy flag is deactivated.
+    + The 'Export' command in most report dialogs now requires the 'Export' application policy flag, and the master key must be entered.
+    + Single line edit dialogs now support hiding the value using asterisks.
+    + Commands that require elevation now have a shield icon like on Windows.
+    + TrlUtil: added 'Move Selected Unused Text to Dialog Control' command.
+  * Improvements:
+    * The content mode of the configuration elements '/Configuration/Application/TriggerSystem', '/Configuration/Integration/UrlSchemeOverrides' and '/Configuration/PasswordGenerator/UserProfiles' is now 'Replace' by default.
+    * The built-in override for the 'ssh' URI scheme is now deactivated by default (it can be activated in the 'URL Overrides' dialog).
+    * When opening the password generator dialog without a derived profile, the '(Automatically generated passwords for new entries)' profile is now selected by default, if profiles are enabled (otherwise the default profile is used).
+    * The clipboard workarounds are now disabled by default (they are not needed anymore on most systems).
+    * Improved clipboard clearing.
+    * Improved starting of an elevated process.
+  * Bugfixes:
+    + In report dialogs, the 'Print' and 'Export' commands now always use the actual data (in previous versions, asterisks were printed/exported when the application policy flag 'Unhide Passwords' was turned off).
+
 -------------------------------------------------------------------
 Sat Feb 11 13:44:05 UTC 2023 - Matthias Bach <marix@marix.org> - 2.53.1
 
diff --git a/keepass.spec b/keepass.spec
index 9dd181c..9da0434 100644
--- a/keepass.spec
+++ b/keepass.spec
@@ -18,7 +18,7 @@
 
 %define _name KeePass
 Name:           keepass
-Version:        2.53.1
+Version:        2.54
 Release:        0
 Summary:        Password Manager
 License:        GPL-2.0-or-later