diff --git a/.gitignore b/.gitignore
index f43b28f..9bae2f6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -24,3 +24,4 @@
 /libuv-v0.10.28.tar.gz
 /libuv-v0.10.29.tar.gz
 /libuv-v0.10.33.tar.gz
+/libuv-v0.10.34.tar.gz
diff --git a/libuv.spec b/libuv.spec
index 622dc51..b8364ce 100644
--- a/libuv.spec
+++ b/libuv.spec
@@ -4,8 +4,8 @@
 
 Name: libuv
 Epoch:   1
-Version: 0.10.33
-Release: 2%{?dist}
+Version: 0.10.34
+Release: 1%{?dist}
 Summary: Platform layer for node.js
 
 Group: System Environment/Libraries
@@ -119,6 +119,12 @@ cp out-static/Release/obj.target/libuv.a %{buildroot}/%{_libdir}
 %{_libdir}/libuv.a
 
 %changelog
+* Tue Feb 24 2015 T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.34-1
+- new upstream release 0.10.34
+  https://github.com/joyent/libuv/blob/v0.10.34/ChangeLog
+- resolves incorrect revocation while reliquishing privileges security
+  vulnerability (CVE-2015-0278, RHBZ#1194651)
+
 * Thu Feb 19 2015 T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.33-2
 - add missing %%{_?isa} to devel requires of main package
 - fix some issues with the pkgconfig file and Group reported by Michael Schwendt
diff --git a/sources b/sources
index 7e765af..a7c7c2b 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-3189f552d9b67b9b61b067f0f32df144  libuv-v0.10.33.tar.gz
+7129911e2bffe23cf7273f2cf8717281  libuv-v0.10.34.tar.gz