diff --git a/.gitignore b/.gitignore
index afd1e75..8aa2582 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,3 +3,4 @@
 /python-gnupg-0.3.7.tar.gz
 /python-gnupg-0.3.8.tar.gz
 /python-gnupg-0.4.3.tar.gz
+/python-gnupg-0.4.4.tar.gz
diff --git a/python-gnupg.spec b/python-gnupg.spec
index b032cdc..cff49ea 100644
--- a/python-gnupg.spec
+++ b/python-gnupg.spec
@@ -5,12 +5,12 @@
 %endif
 
 Name:           python-gnupg
-Version:        0.4.3
-Release:        2%{?dist}
+Version:        0.4.4
+Release:        1%{?dist}
 Summary:        A wrapper for the Gnu Privacy Guard (GPG or GnuPG)
 
 License:        BSD
-URL:            https://gnupg.readthedocs.io/en/latest
+URL:            https://gnupg.readthedocs.io/
 Source0:        https://pypi.io/packages/source/p/%{name}/%{name}-%{version}.tar.gz
 BuildArch:      noarch
 
@@ -73,6 +73,9 @@ GnuPG bindings for python. This uses the gpg command.
 %endif # with python3
 
 %changelog
+* Fri Apr 26 2019 Paul Wouters <pwouters@redhat.com> - 0.4.4-1
+- Resolves rhbz#1670364 Fixes CVE-2019-6690
+
 * Sat Feb 02 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.4.3-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
 
diff --git a/sources b/sources
index dc2ca2f..a255a63 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (python-gnupg-0.4.3.tar.gz) = 9381acb1246b6ceec4de21091f2ce57dba9c6600dfb52ddee181effbd2e749d18935e6b6bb2183816064e9129cd1bb3ebfdd28a5dcddc9be1c56261a501067d8
+SHA512 (python-gnupg-0.4.4.tar.gz) = d643447833248ed35c9837482f8ec7cce478b21374d4fd7ec444008433f85898f6ab0026b9c6dc0deb9730e98ec8edcfc5ed08359776a3220adf8f44f266b199