diff --git a/.gitignore b/.gitignore
index 54a6924..5f8e8e7 100644
--- a/.gitignore
+++ b/.gitignore
@@ -12,3 +12,4 @@
 /synapse-0.31.2.tar.gz
 /synapse-0.33.3.1.tar.gz
 /synapse-0.34.0.tar.gz
+/synapse-0.34.0.1.tar.gz
diff --git a/matrix-synapse.spec b/matrix-synapse.spec
index cfa0c60..cf8e0bb 100644
--- a/matrix-synapse.spec
+++ b/matrix-synapse.spec
@@ -3,7 +3,7 @@
 %{?python_enable_dependency_generator}
 
 Name:       matrix-%{srcname}
-Version:    0.34.0
+Version:    0.34.0.1
 Release:    1%{?dist}
 Summary:    A Matrix reference homeserver written in Python using Twisted
 License:    ASL 2.0
@@ -119,6 +119,9 @@ exit 0
 
 
 %changelog
+* Fri Jan 11 2019 Jeremy Cline <jeremy@jcline.org> - 0.34.0.1-1
+- Update to v0.34.0.1, fixes CVE-2019-5885
+
 * Fri Dec 28 2018 Jeremy Cline <jeremy@jcline.org> - 0.34.0-1
 - Update to v0.34.0
 - Switch to Python 3
diff --git a/sources b/sources
index cabd11a..c6007a0 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (synapse-0.34.0.tar.gz) = b2ffcf2effbf3992d7cc222be95d213d87d7dd9c5a8465211bed1b748702700441d973fbde495ede04902a3c03ead93190028bb9668209a826691e7147b1a936
+SHA512 (synapse-0.34.0.1.tar.gz) = e54e7575b1c1b1cc9405f7d44b3f9a918f7f8827c207d0c4e0aadd467ef18281173fbccd3620f37a00b5abb7521e1ebacd2704abdaa9d5b7d89aed4658d18d99