diff --git a/libXfont-1.5.3.tar.bz2 b/libXfont-1.5.3.tar.bz2
deleted file mode 100644
index 544b11a..0000000
--- a/libXfont-1.5.3.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ab85c10fd2683481dfef672a77fe60e6a2039558cbc0e9bf56b5e1df471c93d0
-size 519793
diff --git a/libXfont-1.5.4.tar.bz2 b/libXfont-1.5.4.tar.bz2
new file mode 100644
index 0000000..5073342
--- /dev/null
+++ b/libXfont-1.5.4.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:1a7f7490774c87f2052d146d1e0e64518d32e6848184a18654e8d0bb57883242
+size 528883
diff --git a/libXfont.changes b/libXfont.changes
index 4733417..2b186ad 100644
--- a/libXfont.changes
+++ b/libXfont.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Tue Nov 28 19:20:44 UTC 2017 - sndirsch@suse.com
+
+- Update to release 1.5.4
+  * Open files with O_NOFOLLOW. (CVE-2017-16611)
+
 -------------------------------------------------------------------
 Fri Oct 20 13:56:21 UTC 2017 - sndirsch@suse.com
 
diff --git a/libXfont.spec b/libXfont.spec
index 3d520e0..83adcc5 100644
--- a/libXfont.spec
+++ b/libXfont.spec
@@ -18,7 +18,7 @@
 
 Name:           libXfont
 %define lname	libXfont1
-Version:        1.5.3
+Version:        1.5.4
 Release:        0
 Summary:        X font handling library for server and utilities
 License:        MIT