diff --git a/.gitignore b/.gitignore
index edbabe0..ce4c62c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,3 +3,4 @@ commons-compress-1.0-src.tar.gz
 /commons-compress-1.2-src.tar.gz
 /commons-compress-1.3-src.tar.gz
 /commons-compress-1.4-src.tar.gz
+/commons-compress-1.4.1-src.tar.gz
diff --git a/apache-commons-compress.spec b/apache-commons-compress.spec
index c337e1f..3c9749b 100644
--- a/apache-commons-compress.spec
+++ b/apache-commons-compress.spec
@@ -2,7 +2,7 @@
 %global short_name      commons-%{base_name}
 
 Name:             apache-%{short_name}
-Version:          1.4
+Version:          1.4.1
 Release:          1%{?dist}
 Summary:          Java API for working with tar, zip and bzip2 files
 Group:            Development/Libraries
@@ -91,6 +91,10 @@ cp -pr target/site/api*/* %{buildroot}%{_javadocdir}/%{name}
 
 
 %changelog
+* Thu May 24 2012 Sandro Mathys <red at fedoraproject.org> - 1.4.1-1
+- Updated to 1.4.1
+- Fixes CVE-2012-2098 Low: Denial of Service
+
 * Fri Apr 27 2012 Sandro Mathys <red at fedoraproject.org> - 1.4-1
 - Updated to 1.4
 
diff --git a/sources b/sources
index 26145fb..21184e4 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-866cc45afa89ba0df6374d705d816e85  commons-compress-1.4-src.tar.gz
+f26e9d94dd83976d76dfa5e1052abb49  commons-compress-1.4.1-src.tar.gz