diff --git a/phpMyAdmin-4.0.4-all-languages.tar.bz2 b/phpMyAdmin-4.0.4-all-languages.tar.bz2
deleted file mode 100644
index c844a73..0000000
--- a/phpMyAdmin-4.0.4-all-languages.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:c8e5f1d5d9899eb765760a10894147b447810f3234e9b029d7abee4b0a16c58d
-size 5985682
diff --git a/phpMyAdmin-4.0.4.1-all-languages.tar.bz2 b/phpMyAdmin-4.0.4.1-all-languages.tar.bz2
new file mode 100644
index 0000000..faefffc
--- /dev/null
+++ b/phpMyAdmin-4.0.4.1-all-languages.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:bd4f5c8084f9378657a02bb9ec3396db365f98b2a0f7b1a3930d7a116502ea8c
+size 5987530
diff --git a/phpMyAdmin.changes b/phpMyAdmin.changes
index 9dec69c..caf32ac 100644
--- a/phpMyAdmin.changes
+++ b/phpMyAdmin.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Wed Jul  3 21:40:23 UTC 2013 - obs@ladisch.de
+
+- update to 4.0.4.1 (2013-06-30)
+  + [security] Global variables scope injection vulnerability
+    (PMASA-2013-7, CVE-2013-4729)
+
 -------------------------------------------------------------------
 Tue Jun 18 22:29:34 UTC 2013 - ecsos@schirra.net
 
diff --git a/phpMyAdmin.spec b/phpMyAdmin.spec
index ae5fdd5..070c227 100644
--- a/phpMyAdmin.spec
+++ b/phpMyAdmin.spec
@@ -34,7 +34,7 @@ Name:           phpMyAdmin
 Summary:        Administration of MySQL over the web
 License:        GPL-2.0+
 Group:          Productivity/Networking/Web/Frontends
-Version:        4.0.4
+Version:        4.0.4.1
 Release:        0
 Url:            http://www.phpMyAdmin.net
 Source0:        %{name}-%{version}-all-languages.tar.bz2