diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1f4759da69..95539ed185 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -85,6 +85,15 @@ it will be removed; but as it won't be user-visible this isn't considered a brea
 
 ## RELEASE NOTES
 
+## [3.4.1] February 07, 2023
+[3.4.1]: https://github.com/emissary-ingress/emissary/compare/v3.4.0...v3.4.1
+
+### Emissary-ingress and Ambassador Edge Stack
+
+- Security: This upgrades emissary-ingress to be built on Envoy v1.24.2. This captures a  patch to
+  boringssl to address CVE-2023-0286. It also includes an update to c-ares dependency to address
+  issue with cname wildcard dns resolution for upstream clusters.
+
 ## [3.4.0] January 03, 2023
 [3.4.0]: https://github.com/emissary-ingress/emissary/compare/v3.3.0...v3.4.0
 
diff --git a/charts/emissary-ingress/CHANGELOG.md b/charts/emissary-ingress/CHANGELOG.md
index 203d8c2cd7..80df870730 100644
--- a/charts/emissary-ingress/CHANGELOG.md
+++ b/charts/emissary-ingress/CHANGELOG.md
@@ -3,7 +3,11 @@
 This file documents all notable changes to Ambassador Helm Chart. The release
 numbering uses [semantic versioning](http://semver.org).
 
-## v8.4.0 - 2022-01-03
+## v8.4.1 - 2023-02-07
+
+- Upgrade Emissary to v3.4.1 [CHANGELOG](https://github.com/emissary-ingress/emissary/blob/master/CHANGELOG.md)
+
+## v8.4.0 - 2023-01-03
 
 - Upgrade Emissary to v3.4.0 [CHANGELOG](https://github.com/emissary-ingress/emissary/blob/master/CHANGELOG.md)
 
diff --git a/docs/releaseNotes.yml b/docs/releaseNotes.yml
index 54636de0a8..59e7402455 100644
--- a/docs/releaseNotes.yml
+++ b/docs/releaseNotes.yml
@@ -32,6 +32,17 @@
 
 changelog: https://github.com/emissary-ingress/emissary/blob/$branch$/CHANGELOG.md
 items:
+  - version: 3.4.1
+    date: '2023-02-07'
+    notes:
+      - title: Upgrade to Envoy 1.24.2
+        type: security
+        body: >-
+          This upgrades emissary-ingress to be built on Envoy v1.24.2. This captures a 
+          patch to boringssl to address CVE-2023-0286. It also includes an update to c-ares
+          dependency to address issue with cname wildcard dns resolution for upstream clusters.
+        docs: https://www.envoyproxy.io/docs/envoy/v1.24.2/version_history/v1.24/v1.24.2
+
   - version: 3.4.0
     prevVersion: 3.3.0
     date: '2023-01-03'