diff --git a/.gitignore b/.gitignore
index 10dc521..24281d4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -50,3 +50,5 @@
 /libreswan-4.8.tar.gz.asc
 /libreswan-4.9.tar.gz
 /libreswan-4.9.tar.gz.asc
+/libreswan-4.10.tar.gz.asc
+/libreswan-4.10.tar.gz
diff --git a/libreswan.spec b/libreswan.spec
index 5c5f650..2d5ab16 100644
--- a/libreswan.spec
+++ b/libreswan.spec
@@ -30,8 +30,8 @@
 Name: libreswan
 Summary: Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec
 # version is generated in the release script
-Version: 4.9
-Release: %{?prever:0.}2%{?prever:.%{prever}}%{?dist}.1
+Version: 4.10
+Release: %{?prever:0.}1%{?prever:.%{prever}}%{?dist}
 License: GPLv2
 Url: https://libreswan.org/
 Source0: https://download.libreswan.org/%{?prever:development/}%{name}-%{version}%{?prever}.tar.gz
@@ -207,6 +207,9 @@ certutil -N -d sql:$tmpdir --empty-password
 %doc %{_mandir}/*/*
 
 %changelog
+* Wed Mar 01 2023 Paul Wouters <paul.wouters@aiven.io - 4.10-1
+- Update to 4.10 for CVE-2023-23009
+
 * Thu Jan 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 4.9-2.1
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
 
diff --git a/sources b/sources
index 24c8d61..07d2bf7 100644
--- a/sources
+++ b/sources
@@ -1,6 +1,4 @@
-SHA512 (LIBRESWAN-GPG-KEY.txt) = 8f1c4d8c2fb60c9089659aa3f8ff8e796b144f2c23f408780d5d0ef30ed7454ccf77c0c346213d4de8ef3c1d066d4a4385508486b2f13f7623231a11259ce0a2
-SHA512 (libreswan-4.9.tar.gz) = 4a43b09b0ef1bacc64ca1b74e7c268df7f024d8b6a9633a489f373ecd9327b173e9508dbc13c4d25ee74f3e2ba569d9d38dfd851fd98cf3cde4a61ef90a1d9d5
-SHA512 (libreswan-4.9.tar.gz.asc) = 6339776ad781fdbd9fe554747befcc811b59163c3f3ef33d1fab377002ef793c3bd14366a1df50a95468bd5e763fed471f54d6737ba2116e833d2f015b65b08e
+SHA512 (libreswan-4.10.tar.gz.asc) = c8a18afc80077bdbf98424ac7a8a2c275aa065bbfa8b1dd841d6e7e82c3e0b769a30c1bbf26b58a3a20611156cf7f51d743178ffc7573ae9dd845752f983e8a8
+SHA512 (libreswan-4.10.tar.gz) = 757cf38dcc46541d2f9d35b3368d0fcbd254dd0440718d053ce693f7d4295d7223e4c77166cd353e7c461516b319a921fa961d1c5bbaf49cf249e4167abc7240
 SHA512 (ikev1_dsa.fax.bz2) = 627cbac14248bd68e8d22fbca247668a7749ef0c2e41df8d776d62df9a21403d3a246c0bd82c3faedce62de90b9f91a87f753e17b056319000bba7d2038461ac
 SHA512 (ikev1_psk.fax.bz2) = 1b2daec32edc56b410c036db2688c92548a9bd9914994bc7e555b301dd6db4497a6b3e89dc12ddf36826ae90b40fcde501a5a45c0d59098e07839073d219d467
-SHA512 (ikev2.fax.bz2) = 65c65d86fd1a7539c0ad516b0f49546d5722b710225857ee2d2f5f3415ac7d023264746398f3637fd248a4ce2364957c516c31214ee33faefe58ac8e4e333a10