diff --git a/.cvsignore b/.cvsignore
index b576525..5f4c598 100644
--- a/.cvsignore
+++ b/.cvsignore
@@ -1 +1 @@
-libpng-1.2.34.tar.bz2
+libpng-1.2.35.tar.bz2
diff --git a/libpng.spec b/libpng.spec
index 46b1b7d..00fd3b5 100644
--- a/libpng.spec
+++ b/libpng.spec
@@ -1,8 +1,8 @@
 Summary: A library of functions for manipulating PNG image format files
 Name: libpng
 Epoch: 2
-Version: 1.2.34
-Release: 2%{?dist}
+Version: 1.2.35
+Release: 1%{?dist}
 License: zlib
 Group: System Environment/Libraries
 URL: http://www.libpng.org/pub/png/
@@ -91,6 +91,9 @@ rm -rf $RPM_BUILD_ROOT%{_libdir}/libpng12.la
 rm -rf $RPM_BUILD_ROOT
 
 %changelog
+* Wed Feb 25 2009 Tom Lane <tgl@redhat.com> 2:1.2.35-1
+- Update to libpng 1.2.35, to fix CVE-2009-0040
+
 * Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2:1.2.34-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
 
diff --git a/sources b/sources
index 2b5caa3..8c3b44c 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-37362876feb21344fd3af1228527db0f  libpng-1.2.34.tar.bz2
+b8b8d09adf6bee2c5902c8e54c4f2e68  libpng-1.2.35.tar.bz2