diff --git a/.gitignore b/.gitignore
index 926985d..42f3ebf 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/koji-1.35.0.tar.bz2
+SOURCES/koji-1.35.1.tar.bz2
diff --git a/.koji.metadata b/.koji.metadata
index 59032f4..816db32 100644
--- a/.koji.metadata
+++ b/.koji.metadata
@@ -1 +1 @@
-54bd1953f8f5c16dfa5f5dd6f037110ec6b995e4  SOURCES/koji-1.35.0.tar.bz2
+7dc628f4206df8865bb4c71db4ce8a0f41891c83  SOURCES/koji-1.35.1.tar.bz2
diff --git a/SPECS/koji.spec b/SPECS/koji.spec
index 7ca5fc0..94df89e 100644
--- a/SPECS/koji.spec
+++ b/SPECS/koji.spec
@@ -8,7 +8,7 @@
 %{?!python3_pkgversion:%global python3_pkgversion 3}
 
 Name: koji
-Version: 1.35.0
+Version: 1.35.1
 Release: 1%{?dist}.inferit
 # the included arch lib from yum's rpmUtils is GPLv2+
 # Automatically converted from old format: LGPLv2 and GPLv2+ - review is highly recommended.
@@ -363,6 +363,10 @@ done
 %systemd_postun kojira.service
 
 %changelog
+* Tue Oct 08 2024 Kevin Fenzi <kevin@scrye.com> - 1.35.1-1
+- Update to 1.35.1. Fixes rhbz#2316304
+- Fixes CVE-2024-9427
+
 * Wed Sep 18 2024 Kevin Fenzi <kevin@scrye.com> - 1.35.0-1
 - Update to 1.35.0. Fixes rhbz#2312848