diff --git a/.gitignore b/.gitignore
index e047a21..536e232 100644
--- a/.gitignore
+++ b/.gitignore
@@ -11,3 +11,4 @@
 /mbedtls-2.5.1-apache.tgz
 /mbedtls-2.6.0-apache.tgz
 /mbedtls-2.7.0-apache.tgz
+/mbedtls-2.8.0-apache.tgz
diff --git a/mbedtls.spec b/mbedtls.spec
index 6590096..87855cf 100644
--- a/mbedtls.spec
+++ b/mbedtls.spec
@@ -3,7 +3,7 @@
 %endif
 
 Name: mbedtls
-Version: 2.7.0
+Version: 2.8.0
 Release: 1%{?dist}
 Summary: Light-weight cryptographic and SSL/TLS library
 Group: System Environment/Libraries
@@ -128,6 +128,10 @@ LD_LIBRARY_PATH=$PWD/library ctest --output-on-failure -V
 %doc apidoc/*
 
 %changelog
+* Fri Apr 06 2018 Morten Stevens <mstevens@fedoraproject.org> - 2.8.0-1
+- Update to 2.8.0
+- CVE-2018-0488, CVE-2018-0487
+
 * Tue Feb 06 2018 Morten Stevens <mstevens@fedoraproject.org> - 2.7.0-1
 - Update to 2.70
 - Enable pthread support (#1533435)
diff --git a/sources b/sources
index a8d2b70..f3a3aa8 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (mbedtls-2.7.0-apache.tgz) = 1cdd0e9a8f0639830c03520a5fdf1546864e0ee7fc4dd5ef2c8a260d0f911b903a83038fd43e25c59a0e1d894b494fb6947478e0007a341c5ffcee5bf25cf43f
+SHA512 (mbedtls-2.8.0-apache.tgz) = f70acd91eb1d0173372bfffde98931d3fec39d57cdde223767bc49f2e18c65977e76572e59f921693ed5c4dc3cc67929308e8e483cf2b64831c0f09aaf6a1a01