diff --git a/0102-curl-7.32.0-debug.patch b/0102-curl-7.32.0-debug.patch
index 81cdc0f..035c524 100644
--- a/0102-curl-7.32.0-debug.patch
+++ b/0102-curl-7.32.0-debug.patch
@@ -12,7 +12,7 @@ diff --git a/configure b/configure
 index 8f079a3..53b4774 100755
 --- a/configure
 +++ b/configure
-@@ -15999,18 +15999,11 @@ $as_echo "yes" >&6; }
+@@ -16005,18 +16005,11 @@ $as_echo "yes" >&6; }
      gccvhi=`echo $gccver | cut -d . -f1`
      gccvlo=`echo $gccver | cut -d . -f2`
      compiler_num=`(expr $gccvhi "*" 100 + $gccvlo) 2>/dev/null`
diff --git a/0103-curl-7.32.0-metalink.patch b/0103-curl-7.32.0-metalink.patch
index 1f0ecde..33cec9c 100644
--- a/0103-curl-7.32.0-metalink.patch
+++ b/0103-curl-7.32.0-metalink.patch
@@ -12,7 +12,7 @@ diff --git a/configure b/configure
 index a466175..cb63075 100755
 --- a/configure
 +++ b/configure
-@@ -15464,13 +15464,9 @@ fi
+@@ -15470,13 +15470,9 @@ fi
  
  
  
diff --git a/curl-7.34.0.tar.lzma.asc b/curl-7.34.0.tar.lzma.asc
deleted file mode 100644
index 3aabae6..0000000
--- a/curl-7.34.0.tar.lzma.asc
+++ /dev/null
@@ -1,7 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1.4.15 (GNU/Linux)
-
-iEYEABECAAYFAlKwApYACgkQeOEcayedXJFJBwCffGnq3xU7TrvmolGByalNcwAj
-lcUAoJdHDyD3IFQ98N0sCjKE6SKDTZMi
-=Mx7t
------END PGP SIGNATURE-----
diff --git a/curl-7.35.0.tar.lzma.asc b/curl-7.35.0.tar.lzma.asc
new file mode 100644
index 0000000..de64bca
--- /dev/null
+++ b/curl-7.35.0.tar.lzma.asc
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1
+
+iEYEABECAAYFAlLoqVAACgkQeOEcayedXJHXgACfXucGEK+4gBtUjRNJlPdBThPs
+lQkAoJRfmKWAlAvMtBuXofIEog9D2y9z
+=Wgsv
+-----END PGP SIGNATURE-----
diff --git a/curl.spec b/curl.spec
index 3524da0..6cdd67e 100644
--- a/curl.spec
+++ b/curl.spec
@@ -1,6 +1,6 @@
 Summary: A utility for getting files from remote servers (FTP, HTTP, and others)
 Name: curl
-Version: 7.34.0
+Version: 7.35.0
 Release: 1%{?dist}
 License: MIT
 Group: Applications/Internet
@@ -222,6 +222,9 @@ rm -rf $RPM_BUILD_ROOT
 %{_datadir}/aclocal/libcurl.m4
 
 %changelog
+* Wed Jan 29 2014 Kamil Dudka <kdudka@redhat.com> 7.35.0-1
+- new upstream release (fixes CVE-2014-0015)
+
 * Wed Dec 18 2013 Kamil Dudka <kdudka@redhat.com> 7.34.0-1
 - new upstream release
 
diff --git a/sources b/sources
index ab504cb..c82983f 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-552371ae5e40bd7d9c92c62ac4b7be81  curl-7.34.0.tar.lzma
+ad7d63864414c61246450dc5e2248c7b  curl-7.35.0.tar.lzma