diff --git a/.gitignore b/.gitignore
index dd61652..c42b804 100644
--- a/.gitignore
+++ b/.gitignore
@@ -11,3 +11,4 @@ libsoup-2.31.6.tar.bz2
 /libsoup-2.34.0.tar.bz2
 /libsoup-2.34.1.tar.bz2
 /libsoup-2.35.3.tar.xz
+/libsoup-2.35.4.tar.gz
diff --git a/libsoup.spec b/libsoup.spec
index ba662a1..2a913a8 100644
--- a/libsoup.spec
+++ b/libsoup.spec
@@ -3,7 +3,7 @@
 ### Abstract ###
 
 Name: libsoup
-Version: 2.35.3
+Version: 2.35.4
 Release: 1%{?dist}
 License: LGPLv2
 Group: Development/Libraries
@@ -86,6 +86,9 @@ rm -rf $RPM_BUILD_ROOT
 %{_datadir}/gtk-doc/html/%{name}-2.4
 
 %changelog
+* Thu Jul 28 2011 Dan Winship <danw@redhat.com> - 2.35.4-1
+- Update to 2.35.4, including fix for CVE-2011-2524
+
 * Tue Jul 05 2011 Bastien Nocera <bnocera@redhat.com> 2.35.3-1
 - Update to 2.35.3
 
diff --git a/sources b/sources
index bfddbc3..7802393 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-da66f98b3b6ef208bcc783635cec8f41  libsoup-2.35.3.tar.xz
+2a2df2daeb6cdb16880c310e316d2f57  libsoup-2.35.4.tar.gz