diff --git a/.cvsignore b/.cvsignore
index e87df43..a7b8aa1 100644
--- a/.cvsignore
+++ b/.cvsignore
@@ -2,4 +2,6 @@ unbound-1.1.1.tar.gz
 unbound-1.2.0.tar.gz
 unbound-1.2.1.tar.gz
 unbound-1.3.0.tar.gz
+unbound-1.3.2.tar.gz
+unbound-1.3.1.tar.gz
 unbound-1.3.3.tar.gz
diff --git a/unbound.spec b/unbound.spec
index 256b35f..df0bf25 100644
--- a/unbound.spec
+++ b/unbound.spec
@@ -8,8 +8,8 @@
 
 Summary: Validating, recursive, and caching DNS(SEC) resolver
 Name: unbound
-Version: 1.3.3
-Release: 2%{?dist}
+Version: 1.3.4
+Release: 1%{?dist}
 License: BSD
 Url: http://www.nlnetlabs.nl/unbound/
 Source: http://www.unbound.net/downloads/%{name}-%{version}.tar.gz
@@ -193,6 +193,9 @@ fi
 %postun libs -p /sbin/ldconfig
 
 %changelog
+* Thu Oct 08 2009 Paul Wouters <paul@xelerance.com> - 1.3.4-1
+- Upgraded to 1.3.4. Security fix with validating NSEC3 records
+
 * Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 1.3.3-2
 - rebuilt with new openssl