diff --git a/.gitignore b/.gitignore
index 6f842db..18d5449 100644
--- a/.gitignore
+++ b/.gitignore
@@ -26,3 +26,4 @@
 /mbedtls-2.16.5-apache.tgz
 /mbedtls-2.16.6-apache.tgz
 /mbedtls-2.16.7.tar.gz
+/mbedtls-2.16.8.tar.gz
diff --git a/mbedtls.spec b/mbedtls.spec
index ef0d471..5d619c5 100644
--- a/mbedtls.spec
+++ b/mbedtls.spec
@@ -3,8 +3,8 @@
 %endif
 
 Name: mbedtls
-Version: 2.16.7
-Release: 4%{?dist}
+Version: 2.16.8
+Release: 1%{?dist}
 Summary: Light-weight cryptographic and SSL/TLS library
 License: ASL 2.0
 URL: https://tls.mbed.org/
@@ -123,6 +123,9 @@ mv $RPM_BUILD_ROOT%{_bindir} $RPM_BUILD_ROOT%{_libexecdir}/mbedtls
 %doc apidoc/*
 
 %changelog
+* Tue Sep 08 2020 Morten Stevens <mstevens@fedoraproject.org> - 2.16.8-1
+- Update to 2.16.8
+
 * Thu Aug 20 2020 Morten Stevens <mstevens@fedoraproject.org> - 2.16.7-4
 - Switch to cmake_build, cmake_install and ctest
 - FTBFS in Fedora rawhide/f33 (#1864124)
diff --git a/sources b/sources
index b7992e9..5689e2a 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (mbedtls-2.16.7.tar.gz) = 57374061ec8ec7cbb745aa08235d17d4566435c7ad861c0a9fdc8957e09c1ea6619f0deb8a22040fa3674d0fab58ca353879eac1388e710c81840a7ae1225b9f
+SHA512 (mbedtls-2.16.8.tar.gz) = 645d58d42594a2b547b904634acc1e7e8583465e075c190183e1179638f05e1f8f5c56561ab172fed8dcec4a1742429663abdfdc25d607410ea64a35fbb22168