diff --git a/.gitignore b/.gitignore
index cdf69dd..9e385d6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,3 +4,4 @@
 /libslirp-v4.3.0.tar.gz
 /libslirp-4.3.0.tar.xz
 /libslirp-4.3.1.tar.xz
+/libslirp-4.4.0.tar.xz
diff --git a/libslirp.spec b/libslirp.spec
index ff28859..4c004d6 100644
--- a/libslirp.spec
+++ b/libslirp.spec
@@ -1,6 +1,6 @@
 Name:           libslirp
-Version:        4.3.1
-Release:        2%{?dist}
+Version:        4.4.0
+Release:        1%{?dist}
 Summary:        A general purpose TCP-IP emulator
 
 # check the SPDX tags in source files for details
@@ -52,6 +52,13 @@ developing applications that use %{name}.
 
 
 %changelog
+* Wed Dec  2 18:19:30 +04 2020 Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-1
+- new version
+
+* Fri Nov 27 20:10:28 +04 2020 Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
+- Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
+  rhbz#1902232
+
 * Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 4.3.1-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
 
diff --git a/sources b/sources
index 0011b1f..2b44290 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (libslirp-4.3.1.tar.xz) = b34793d67dbe15302a16562ce6e63063eec04f8ca1a6fdb5c10891de9fbcc59877c30d4883cd8c5d911147981401b93dacae538a5b85253bde5e44edea6c228c
+SHA512 (libslirp-4.4.0.tar.xz) = 5b02d1ed505af6cfa1db3b1f3dc785f16e7518ab8c3f9abe02a2dc277a5dce2ba120617c0f27d9be8a8471e087612a7ac184af348bd3f0517f2715bb57517445