diff --git a/nghttp2.spec b/nghttp2.spec
index fb7abae..1ef47bf 100644
--- a/nghttp2.spec
+++ b/nghttp2.spec
@@ -1,6 +1,6 @@
 Summary: Experimental HTTP/2 client, server and proxy
 Name: nghttp2
-Version: 1.55.0
+Version: 1.55.1
 Release: 1%{?dist}
 License: MIT
 URL: https://nghttp2.org/
@@ -120,6 +120,10 @@ export "LD_LIBRARY_PATH=$RPM_BUILD_ROOT%{_libdir}:$LD_LIBRARY_PATH"
 
 
 %changelog
+* Mon Jul 17 2023 Jan Macku <jamacku@redhat.com> 1.55.1-1
+- update to the latest upstream release
+- fixes CVE-2023-35945 - memmory leak
+
 * Thu Jul 13 2023 Jan Macku <jamacku@redhat.com> 1.55.0-1
 - update to the latest upstream release
 
diff --git a/sources b/sources
index 5f339da..ef5c55d 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (nghttp2-1.55.0.tar.xz) = ccb13dd3067c5937d9b73132045788862b9cead6dc57611b1a9c55b6d1eea2c70c4d155e1a7b94ca6c6f31f4b75e45d0af680a50a061d6aab68ca75492dad640
-SHA512 (nghttp2-1.55.0.tar.xz.asc) = 189963056d2129a957332799d30c58ac6005b79d509450bf86def19c2c46004ab2bb013075c030aa9825ead6ea8b8edc725cacee585613648733cc8b6e999399
+SHA512 (nghttp2-1.55.1.tar.xz) = ad948aa957ce429346b2a79933ba3b5f94e9386e1bc36961ed181685cd65f3d9d6937e3d4d228be17ac793e438776515b6a071ae1801b1481db9ad2c1166c1c3
+SHA512 (nghttp2-1.55.1.tar.xz.asc) = ea5741f6f6ab6918d02ad513f39a0b744e1abfde9594675bfd9239573b743178b4bc5a307669b0b8e7dd0132bd074ec69acf2b2e8b606e4ac762b4ea11059cc3