diff --git a/.gitignore b/.gitignore
index eeccdc80..61c1710f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -36,3 +36,4 @@
 /chromium-63.0.3239.84-clean.tar.xz
 /chromium-63.0.3239.108-clean.tar.xz
 /chromium-64.0.3282.119-clean.tar.xz
+/chromium-64.0.3282.140-clean.tar.xz
diff --git a/chromium.spec b/chromium.spec
index 7b2e3c8f..6b1e0d47 100644
--- a/chromium.spec
+++ b/chromium.spec
@@ -116,8 +116,8 @@ Name:		chromium%{chromium_channel}%{?freeworld:-freeworld}
 %else
 Name:		chromium%{chromium_channel}
 %endif
-Version:	%{majorversion}.0.3282.119
-Release:	2%{?dist}
+Version:	%{majorversion}.0.3282.140
+Release:	1%{?dist}
 Summary:	A WebKit (Blink) powered web browser
 Url:		http://www.chromium.org/Home
 License:	BSD and LGPLv2+ and ASL 2.0 and IJG and MIT and GPLv2+ and ISC and OpenSSL and (MPLv1.1 or GPLv2 or LGPLv2)
@@ -1519,6 +1519,9 @@ getent group chrome-remote-desktop >/dev/null || groupadd -r chrome-remote-deskt
 
 
 %changelog
+* Fri Feb  2 2018 Tom Callaway <spot@fedoraproject.org> 64.0.3282.140-1
+- update to 64.0.3282.140
+
 * Thu Feb  1 2018 Tom Callaway <spot@fedoraproject.org> 64.0.3282.119-2
 - include user-session binary in chrome-remote-desktop subpackage
 
diff --git a/sources b/sources
index a02ccb6d..5cf5a637 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
 SHA512 (depot_tools.git-master.tar.gz) = d3d6a1873b2b0296a8cd99e0d8d2e629a17b1808934b4972556168f8b4ccea60577ebaeab4445baf15afb1b04080808db59a832a5b61d247bd48da14fa6acf03
-SHA512 (chromium-64.0.3282.119-clean.tar.xz) = bb852af3dbfe56fcc0b86cc8e54a83f30e81493777494151bf2fc9c60149a2b9b0a93b1868f44500d24b95d95dec01024481998e33ad899c8386ea4ee8d770cc
+SHA512 (chromium-64.0.3282.140-clean.tar.xz) = 9e8f5417bfc6a761ea50677c60c86ad4bebca3e42b2040e887a8b2ab5b97e10b07b192f6b8e15de6f4f872c324f08ef9b0fdf9df7a275526d935cbdd5faa4048