diff --git a/.gitignore b/.gitignore
index 39b32ca..4cb234a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,4 @@
 /cjson-1.7.14.tar.gz
 /cjson-1.7.15.tar.gz
 /cjson-1.7.17.tar.gz
+/cjson-1.7.18.tar.gz
diff --git a/cjson.spec b/cjson.spec
index f805b7c..f0afded 100644
--- a/cjson.spec
+++ b/cjson.spec
@@ -1,6 +1,6 @@
 Name:           cjson
-Version:        1.7.17
-Release:        2%{?dist}
+Version:        1.7.18
+Release:        1%{?dist}
 Summary:        Ultralightweight JSON parser in ANSI C
 
 # several files in tests/ are Apache-2.0 but are not packaged
@@ -55,6 +55,10 @@ rm -f %{buildroot}%{_libdir}/*.{la,a}
 %{_includedir}/cjson/
 
 %changelog
+* Thu Sep 26 2024 Fabian Affolter <mail@fabian-affolter.ch> - 1.7.18-1
+- Update to new upstream version (closes rhbz#2237124)
+- Fix rhbz#2277268, closes rhbz#2277269
+
 * Wed Jul 17 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.7.17-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
 
diff --git a/sources b/sources
index 4a5d5ba..5b0498d 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (cjson-1.7.17.tar.gz) = 4feebafa5225297fa3e6a7bf23f8d31b5c3e172f437078c5a07528522ad58ca2e9c72dd9e8611241d2b8321e9aa0a1a9af7743689d1c2001d1d9cb624aae6fa8
+SHA512 (cjson-1.7.18.tar.gz) = 2accb507c6b97222eb5f0232c015b356cf6d248d1247049928731aa8e897378245e62395c232b1ec57d28d1e53ac72c849be85e59c33616a382d40473649f66b