diff --git a/sources b/sources
index 945c411..b9cd0b1 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (tpm2-tss-4.0.0.tar.gz) = 1058aa74e2358bfb60a17b85291dc642d40b49bb076453810c5b2b0c37c72671c319d783c879f719ccbe7aaeb5f464e0144c6ee12d28242b477be5d579cb3f9c
+SHA512 (tpm2-tss-4.0.1.tar.gz) = ed6ddc52cb0e8c1082a4bb001e1225eb9905fd2380da88db5fd69ff5b5d9d43a93eb67b634e49d53eb5d586832da3aef2c4c7e5f18d51bb730481f8913319d7d
diff --git a/tpm2-tss.spec b/tpm2-tss.spec
index 0b9133b..4355cb2 100644
--- a/tpm2-tss.spec
+++ b/tpm2-tss.spec
@@ -4,8 +4,8 @@
 %endif
 
 Name:          tpm2-tss
-Version:       4.0.0
-Release:       2%{?candidate:.%{candidate}}%{?dist}
+Version:       4.0.1
+Release:       3%{?candidate:.%{candidate}}%{?dist}
 Summary:       TPM2.0 Software Stack
 
 # The entire source code is under BSD except implementation.h and tpmb.h which
@@ -134,6 +134,9 @@ use tpm2-tss.
 
 
 %changelog
+* Wed Jan 25 2023 Peter Robinson <pbrobinson@fedoraproject.org> - 4.0.1-3
+- Update to 4.0.1 - fixes CVE-2023-22745
+
 * Sat Jan 21 2023 Fedora Release Engineering <releng@fedoraproject.org> - 4.0.0-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild