diff --git a/.gitignore b/.gitignore
index f485dba..39b32ca 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,3 @@
 /cjson-1.7.14.tar.gz
 /cjson-1.7.15.tar.gz
+/cjson-1.7.17.tar.gz
diff --git a/cjson.spec b/cjson.spec
index b2107e6..f1d9d4b 100644
--- a/cjson.spec
+++ b/cjson.spec
@@ -1,6 +1,6 @@
 Name:           cjson
-Version:        1.7.15
-Release:        4%{?dist}
+Version:        1.7.17
+Release:        1%{?dist}
 Summary:        Ultralightweight JSON parser in ANSI C
 
 # several files in tests/ are Apache-2.0 but are not packaged
@@ -55,6 +55,10 @@ rm -f %{buildroot}%{_libdir}/*.{la,a}
 %{_includedir}/cjson/
 
 %changelog
+* Sun Apr 07 2024 Fabian Affolter <mail@fabian-affolter.ch> - 1.7.17.-1
+- Update to latest upstream version 1.7.17 (closes rhbz#2255953)
+- Fix rhbz#2254647
+
 * Tue Jan 23 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.7.15-4
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
 
diff --git a/sources b/sources
index eb4e25f..4a5d5ba 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (cjson-1.7.15.tar.gz) = 0b32a758c597fcc90c8ed0af493c9bccd611b9d4f9a03e87de3f7337bb9a28990b810befd44bc321a0cb42cbcd0b026d45761f9bab7bd798f920b7b6975fb124
+SHA512 (cjson-1.7.17.tar.gz) = 4feebafa5225297fa3e6a7bf23f8d31b5c3e172f437078c5a07528522ad58ca2e9c72dd9e8611241d2b8321e9aa0a1a9af7743689d1c2001d1d9cb624aae6fa8