diff --git a/.gitignore b/.gitignore
index 489444f..74bead1 100644
--- a/.gitignore
+++ b/.gitignore
@@ -53,3 +53,4 @@ unbound-1.4.5.tar.gz
 /unbound-1.8.1.tar.gz
 /unbound-1.8.2.tar.gz
 /unbound-1.8.3.tar.gz
+/unbound-1.9.4.tar.gz
diff --git a/sources b/sources
index fed76ad..671802e 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (unbound-1.9.3.tar.gz) = 21e14dc1577adbe502a262d7fbe9aae0cd389cd9c0b822246beadf00f0ee875e268eeb3ce820433cbb01495d6b182c334b34b63b1bc33b08589a230810ccfe90
+SHA512 (unbound-1.9.4.tar.gz) = 44021014c944fc01a1f5f9afd77145f5554a3282cc2bfd54526fc4f88346f497c847ddb72bafa155d7e6e5dd02b6bb031836ead4408977d4e4b5b3290dffea9c
diff --git a/unbound.spec b/unbound.spec
index 5e20860..42185a8 100644
--- a/unbound.spec
+++ b/unbound.spec
@@ -33,8 +33,8 @@
 
 Summary: Validating, recursive, and caching DNS(SEC) resolver
 Name: unbound
-Version: 1.9.3
-Release: 2%{?extra_version:.%{extra_version}}%{?dist}
+Version: 1.9.4
+Release: 1%{?extra_version:.%{extra_version}}%{?dist}
 License: BSD
 Url: https://www.unbound.net/
 Source: https://www.unbound.net/downloads/%{name}-%{version}%{?extra_version}.tar.gz
@@ -65,7 +65,7 @@ BuildRequires: python2-devel swig
 %if 0%{with_python3}
 BuildRequires: python3-devel swig
 %endif
-%if 0%{fedora} >= 30
+%if 0%{?fedora} >= 30
 BuildRequires: systemd-rpm-macros
 %else
 BuildRequires: systemd
@@ -420,6 +420,10 @@ popd
 %attr(0644,root,root) %config %{_sysconfdir}/%{name}/root.key
 
 %changelog
+* Fri Nov 01 2019 Paul Wouters <pwouters@redhat.com> - 1.9.4-1
+- Fix build on rhel/centos systems
+- Resolves: rhbz#1767955 (CVE-2019-16866) uninitialized memory accesses leads to crash via a crafted NOTIFY query
+
 * Thu Sep 26 2019 Petr Menšík <pihhan@gmail.com> - 1.9.3-2
 - Obsolete no longer provided python2 subpackage (#1749400)