diff --git a/.gitignore b/.gitignore
index fc1c02d..c4b4270 100644
--- a/.gitignore
+++ b/.gitignore
@@ -29,3 +29,4 @@ librsvg-2.31.0.tar.bz2
 /librsvg-2.40.15.tar.xz
 /librsvg-2.40.16.tar.xz
 /librsvg-2.40.17.tar.xz
+/librsvg-2.40.18.tar.xz
diff --git a/librsvg2.spec b/librsvg2.spec
index c445a41..1b6d3bc 100644
--- a/librsvg2.spec
+++ b/librsvg2.spec
@@ -1,6 +1,6 @@
 Name:           librsvg2
 Summary:        An SVG library based on cairo
-Version:        2.40.17
+Version:        2.40.18
 Release:        1%{?dist}
 
 License:        LGPLv2+
@@ -105,6 +105,9 @@ chrpath --delete $RPM_BUILD_ROOT%{_libdir}/gdk-pixbuf-2.0/*/loaders/libpixbufloa
 
 
 %changelog
+* Thu Jul 20 2017 Kalev Lember <klember@redhat.com> - 2.40.18-1
+- Update to 2.40.18
+
 * Tue Apr 11 2017 Kalev Lember <klember@redhat.com> - 2.40.17-1
 - Update to 2.40.17
 - Remove lib64 rpaths
diff --git a/sources b/sources
index c77e444..a7562f3 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (librsvg-2.40.17.tar.xz) = 296e623adbf1e833a9b1f11257a911671d6c01568719ff48f8e2a9e0bf8166eae242d0ae23243a9ac335540fff6b6cdd4760ca2f37f8afe188783fd9b1099ef5
+SHA512 (librsvg-2.40.18.tar.xz) = faf503d0d881801ce129715e7ae979ee1675bd32beac9170b1889c94aac64caf486968bc86f3480463b84e94f28c1d805551ffdcb7068ecadd0688146e0fb182