diff --git a/roundcubemail-0.5.1.tar.bz2 b/roundcubemail-0.5.1.tar.bz2
deleted file mode 100644
index ccecda6..0000000
--- a/roundcubemail-0.5.1.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:fb3551dfc549637c21f76d3809d3baffb1b1545b22ed91f7accb0aac746867a1
-size 1822061
diff --git a/roundcubemail-0.5.3.tar.bz2 b/roundcubemail-0.5.3.tar.bz2
deleted file mode 100644
index 5a16f0a..0000000
--- a/roundcubemail-0.5.3.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:b1c306d797b3769f4514df95e025523c13e08fbb89daf1d8101c4b4dfc4df7fe
-size 1837119
diff --git a/roundcubemail-0.5.4.tar.bz2 b/roundcubemail-0.5.4.tar.bz2
new file mode 100644
index 0000000..3beaead
--- /dev/null
+++ b/roundcubemail-0.5.4.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:1cb50e946d92975ac0b4914490680f3a217b62000c9a48329657e2c951cb50be
+size 1837201
diff --git a/roundcubemail.changes b/roundcubemail.changes
index adab004..5a7dc98 100644
--- a/roundcubemail.changes
+++ b/roundcubemail.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Fri Sep 23 12:52:42 CEST 2011 - asemen@suse.de
+
+- Release 0.5.4 upstream update
+   * Fix XSS vulnerability in UI messages (#1488030)
+
 -------------------------------------------------------------------
 Wed Jul 13 10:39:18 CEST 2011 - asemen@suse.de
 
diff --git a/roundcubemail.spec b/roundcubemail.spec
index e87b96a..3e85587 100644
--- a/roundcubemail.spec
+++ b/roundcubemail.spec
@@ -1,18 +1,29 @@
 #
 # spec file for package roundcubemail
 #
-# This file and all modifications and additions to the pristine
-# package are under the same license as the package itself.
+# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany.
+#
+# All modifications and additions to the file contributed by third parties
+# remain the property of their copyright owners, unless otherwise agreed
+# upon. The license for this file, and modifications and additions to the
+# file, is the same license as for the pristine package itself (unless the
+# license for the pristine package is not an Open Source License, in which
+# case the license is the MIT License). An "Open Source License" is a
+# license that conforms to the Open Source Definition (Version 1.9)
+# published by the Open Source Initiative.
+
+# Please submit bugfixes or comments via http://bugs.opensuse.org/
 #
 
 # norootforbuild
 
+
 Name:           roundcubemail
 Summary:        A modern browser-based multilingual IMAP client
 Group:          Productivity/Networking/Email/Clients
 License:        GNU General Public License (GPL)
 Url:            http://www.roundcube.net/
-Version:        0.5.3
+Version:        0.5.4
 Release:        0
 BuildRequires:  apache2-devel pcre-devel
 Requires:       http_daemon mod_php_any php-session php-mysql php-iconv
@@ -20,7 +31,7 @@ Requires:       php-gettext php-mbstring php-openssl
 Source0:        %{name}-%{version}.tar.bz2
 Source1:        %{name}-README.SUSE
 Source2:        %{name}-httpd.conf
-Source3:	%{name}-rpmlintrc
+Source3:        %{name}-rpmlintrc
 # PATCH-FIX-OPENSUSE use the general config directory /etc
 Patch0:         %{name}-config-dir.patch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build