diff --git a/1.3.4.tar.gz b/1.3.4.tar.gz
deleted file mode 100644
index b46b8a7..0000000
--- a/1.3.4.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:9e3c3e223dbc48c072b654711d0c3c29c24f368f5ef628b7bb53a5a8233c6346
-size 3879637
diff --git a/1.3.5.tar.gz b/1.3.5.tar.gz
new file mode 100644
index 0000000..6476d2d
--- /dev/null
+++ b/1.3.5.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:1c9064c4eb2b3ca03e7fdcfff47125c2304378f6cd4d76c5eba7d4f84d59324b
+size 3880332
diff --git a/graphite2.changes b/graphite2.changes
index dfd3dec..66bdb52 100644
--- a/graphite2.changes
+++ b/graphite2.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Fri Feb 12 12:59:39 UTC 2016 - pgajdos@suse.com
+
+- updated to 1.3.5 bnc#965803 CVE-2016-1521:
+  * Security bug fix
+  * Fix ARM misalignment problem
+  * Track latest cmake
+
 -------------------------------------------------------------------
 Mon Dec 21 11:36:38 UTC 2015 - tchvatal@suse.com
 
diff --git a/graphite2.spec b/graphite2.spec
index cfea11e..af54777 100644
--- a/graphite2.spec
+++ b/graphite2.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package graphite2
 #
-# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
 
 %define libname libgraphite2-3
 Name:           graphite2
-Version:        1.3.4
+Version:        1.3.5
 Release:        0
 Summary:        Font rendering capabilities for complex non-Roman writing systems
 License:        LGPL-2.1+ or GPL-2.0+ or MPL-1.1