diff --git a/CHANGELOG.md b/CHANGELOG.md
index d1ba703..624d771 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.4.1 (2018-01-17)
+
+* Fixed potential security issue in `Ed25519` (see https://github.com/jml/haskell-spake2/pull/16),
+  present since initial release. Please update as soon as possible.
+
 ## 0.4.0 (2017-11-22)
 
 * Change `createSessionKey` inputs to be `inbound`, `outbound` rather than
diff --git a/package.yaml b/package.yaml
index 86893f0..4670ad1 100644
--- a/package.yaml
+++ b/package.yaml
@@ -1,5 +1,5 @@
 name: spake2
-version: 0.4.0
+version: 0.4.1
 synopsis: Implementation of the SPAKE2 Password-Authenticated Key Exchange algorithm
 description: |
   This library implements the SPAKE2 password-authenticated key exchange
diff --git a/spake2.cabal b/spake2.cabal
index a5c8886..b8e6244 100644
--- a/spake2.cabal
+++ b/spake2.cabal
@@ -3,7 +3,7 @@
 -- see: https://github.com/sol/hpack
 
 name:           spake2
-version:        0.4.0
+version:        0.4.1
 synopsis:       Implementation of the SPAKE2 Password-Authenticated Key Exchange algorithm
 description:    This library implements the SPAKE2 password-authenticated key exchange
                 ("PAKE") algorithm. This allows two parties, who share a weak password, to