diff --git a/.gitignore b/.gitignore
index 0cf3947..05065f8 100644
--- a/.gitignore
+++ b/.gitignore
@@ -19,3 +19,4 @@ samba-3.6.0pre1.tar.gz
 /samba-4.0.0rc5.tar.bz2
 /samba-4.0.0rc6.tar.bz2
 /samba-4.0.0.tar.bz2
+/samba-4.0.1.tar.bz2
diff --git a/samba.spec b/samba.spec
index d379739..4405fec 100644
--- a/samba.spec
+++ b/samba.spec
@@ -1,9 +1,9 @@
 # Set --with testsuite or %bcond_without to run the Samba torture testsuite.
 %bcond_with testsuite
 
-%define main_release 174
+%define main_release 1
 
-%define samba_version 4.0.0
+%define samba_version 4.0.1
 %define talloc_version 2.0.7
 %define ntdb_version 0.9
 %define tdb_version 1.2.10
@@ -1331,6 +1331,10 @@ rm -rf %{buildroot}
 %{_mandir}/man7/winbind_krb5_locator.7*
 
 %changelog
+* Wed Jan 16 2013 - Andreas Schneider <asn@redhat.com> - 2:4.0.1-1
+- Update to Samba 4.0.1.
+- Fixes CVE-2013-0172.
+
 * Mon Dec 17 2012 - Andreas Schneider <asn@redhat.com> - 2:4.0.0-174
 - Fix typo in winbind-krb-locator post uninstall script.
 
diff --git a/sources b/sources
index 27bcbdf..51a7b51 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-428c05ff3ac7089d5aa96a88105c7cd7  samba-4.0.0.tar.bz2
+9d0539ac2f0b4599d6571bae70b66a11  samba-4.0.1.tar.bz2