diff --git a/.gitignore b/.gitignore
index afa658f..10ab462 100644
--- a/.gitignore
+++ b/.gitignore
@@ -6,3 +6,4 @@ haproxy-1.4.8.tar.gz
 /haproxy-1.4.19.tar.gz
 /haproxy-1.4.20.tar.gz
 /haproxy-1.4.22.tar.gz
+/haproxy-1.4.23.tar.gz
diff --git a/haproxy.spec b/haproxy.spec
index 680ca39..fecde9d 100644
--- a/haproxy.spec
+++ b/haproxy.spec
@@ -5,8 +5,8 @@
 %define haproxy_datadir %{_datadir}/haproxy
 
 Name:           haproxy
-Version:        1.4.22
-Release:        2%{?dist}
+Version:        1.4.23
+Release:        1%{?dist}
 Summary:        HA-Proxy is a TCP/HTTP reverse proxy for high availability environments
 
 Group:          System Environment/Daemons
@@ -129,6 +129,10 @@ exit 0
 
 
 %changelog
+* Tue Apr 02 2013 Ryan O'Hara <rohara@redhat.com> - 1.4.23-1
+- Update to 1.4.23 (CVE-2013-1912, #947697)
+- Drop supplementary groups after setuid/setgid (#894626)
+
 * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.22-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
 
diff --git a/sources b/sources
index 122f7ca..34b5a35 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-a0b007c76f6a78524f3b3dd5e704979c  haproxy-1.4.22.tar.gz
+6535d5e58037ada4b58b439cebe03c79  haproxy-1.4.23.tar.gz