diff --git a/.gitignore b/.gitignore
index af3c4dd..93348f3 100644
--- a/.gitignore
+++ b/.gitignore
@@ -52,3 +52,4 @@ koji-1.4.0.tar.bz2
 /koji-1.34.0.tar.bz2
 /koji-1.34.1.tar.bz2
 /koji-1.35.0.tar.bz2
+/koji-1.35.1.tar.bz2
diff --git a/koji.spec b/koji.spec
index 9da7390..f19c2b4 100644
--- a/koji.spec
+++ b/koji.spec
@@ -8,7 +8,7 @@
 %{?!python3_pkgversion:%global python3_pkgversion 3}
 
 Name: koji
-Version: 1.35.0
+Version: 1.35.1
 Release: 1%{?dist}
 # the included arch lib from yum's rpmUtils is GPLv2+
 # Automatically converted from old format: LGPLv2 and GPLv2+ - review is highly recommended.
@@ -362,6 +362,10 @@ done
 %systemd_postun kojira.service
 
 %changelog
+* Tue Oct 08 2024 Kevin Fenzi <kevin@scrye.com> - 1.35.1-1
+- Update to 1.35.1. Fixes rhbz#2316304
+- Fixes CVE-2024-9427
+
 * Wed Sep 18 2024 Kevin Fenzi <kevin@scrye.com> - 1.35.0-1
 - Update to 1.35.0. Fixes rhbz#2312848
 
diff --git a/sources b/sources
index 8737089..e8c861e 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (koji-1.35.0.tar.bz2) = e4bfa99478d5a47414a176c7972cef7351e6bc2f06bcb34ea536800acbdd725bb7b65acb01403b786f64a0f727cd85a87b9bb03bd7884f0c442b986ffb71d3a0
+SHA512 (koji-1.35.1.tar.bz2) = b4909e95768e397ac424825ab772613baffe4ee46446bcf7e90105610907b75838eb9b5a67cc534e1efb05754847689d5540c5a9ae053e9b75de1c9d7e03f91e