diff --git a/.gitignore b/.gitignore
index 7edd558..cc45de7 100644
--- a/.gitignore
+++ b/.gitignore
@@ -46,3 +46,4 @@
 /go1.9.1.src.tar.gz
 /go1.9.2.src.tar.gz
 /go1.9.3.src.tar.gz
+/go1.9.4.src.tar.gz
diff --git a/golang.spec b/golang.spec
index 59acbf5..f086f33 100644
--- a/golang.spec
+++ b/golang.spec
@@ -96,10 +96,10 @@
 %endif
 
 %global go_api 1.9
-%global go_version 1.9.3
+%global go_version 1.9.4
 
 Name:           golang
-Version:        1.9.3
+Version:        1.9.4
 Release:        1%{?dist}
 Summary:        The Go Programming Language
 # source tree includes several copies of Mark.Twain-Tom.Sawyer.txt under Public Domain
@@ -554,6 +554,11 @@ fi
 %endif
 
 %changelog
+* Thu Feb 08 2018 Jakub Čajka <jcajka@redhat.com> - 1.9.4-1
+- Rebase to 1.9.4
+- Fix CVE-2018-6574
+- Resolves: BZ#1543561, BZ#1543562
+
 * Fri Jan 26 2018 Jakub Čajka <jcajka@redhat.com> - 1.9.3-1
 - Rebase to 1.9.3
 
diff --git a/sources b/sources
index f19f9a1..06e4a51 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (go1.9.3.src.tar.gz) = 31c564af58b78c648c9bece8fa2ed3334feb80316b07b16f6286319e26d317da90d1af0464c3a2f776a3da72d31b22b063dbc620b93114bf142a11e8a625e527
+SHA512 (go1.9.4.src.tar.gz) = 1a7c830e07507ff7b89025adfb5c713444d97301f8ad47ef2564722c1e28186e946350f07e22777fbdd6f2f589c334eb01dfd589e97cb8a86f73669547badb0b