diff --git a/python-jwt.spec b/python-jwt.spec
index c1864e8..a97b7c8 100644
--- a/python-jwt.spec
+++ b/python-jwt.spec
@@ -13,8 +13,8 @@ encrypted JSON objects.}
 
 
 Name:           python-%{pkgname}
-Version:        2.3.0
-Release:        3%{?dist}
+Version:        2.4.0
+Release:        1%{?dist}
 Summary:        JSON Web Token implementation in Python
 License:        MIT
 URL:            https://github.com/jpadilla/pyjwt
@@ -67,6 +67,10 @@ sed -e '/coverage/d' \
 
 
 %changelog
+* Thu May 19 2022 Major Hayden <major@mhtx.net> - 2.4.0-1
+- Update to 2.4.0 (#2085157)
+- Fix CVE-2022-29217 (#2088546)
+
 * Tue Apr 26 2022 Carl George <carl@george.computer> - 2.3.0-3
 - Convert to pyproject macros
 
@@ -217,4 +221,3 @@ sed -e '/coverage/d' \
 
 * Wed Feb 18 2015 Ralph Bean <rbean@redhat.com> - 0.4.2-1
 - initial package for Fedora.
-
diff --git a/sources b/sources
index cb7c80a..7c6b526 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (PyJWT-2.3.0.tar.gz) = c6a1d8c3ce87d2122aa4ce4e19c5d2683aeffae6fb29b20fa17e2dfb1a07faf721beb8ca390d3acdeb85a1476025ca5af4fcdb1019f84c8c1bf229246a7aafe3
+SHA512 (PyJWT-2.4.0.tar.gz) = 6c60afe62f9341c0fd889be227cd9e44260bc88696a93d0c3398547e159001f04e402d207d2230641f0f3d37cfd7e6f9e50a42dadfb011d7087c32a864c792a4