diff --git a/.gitignore b/.gitignore
index e2ec6cb..c7cd92d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -57,3 +57,5 @@ openconnect-2.25.tar.gz
 /openconnect-8.03.tar.gz.asc
 /openconnect-8.04.tar.gz
 /openconnect-8.04.tar.gz.asc
+/openconnect-8.05.tar.gz
+/openconnect-8.05.tar.gz.asc
diff --git a/openconnect.spec b/openconnect.spec
index dfbaf3e..7978663 100644
--- a/openconnect.spec
+++ b/openconnect.spec
@@ -29,8 +29,8 @@
 %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}-%{version}}
 
 Name:		openconnect
-Version:	8.04
-Release:	2%{?relsuffix}%{?dist}
+Version:	8.05
+Release:	1%{?relsuffix}%{?dist}
 Summary:	Open client for Cisco AnyConnect VPN, Juniper Network Connect/Pulse, PAN GlobalProtect
 
 License:	LGPLv2+
@@ -139,6 +139,9 @@ make VERBOSE=1 check
 %{_libdir}/pkgconfig/openconnect.pc
 
 %changelog
+* Thu Sep 12 2019 David Woodhouse <dwmw2@infradead.org> - 8.05-1
+- Update to 8.05 release (CVE-2019-16239)
+
 * Sat Aug 10 2019 Kevin Fenzi <kevin@scrye.com> - 8.04-2
 - Remove hipreport-android.sh from sources
 
diff --git a/sources b/sources
index ca7bff3..78c7246 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (openconnect-8.04.tar.gz) = 3d1f335c5ac62cdcf874b0371e9ed939e5e44060d422b35120d0a6bb87f1a7cc4ffc783e6c65d11a9d5ef974c99e56107da837ee61a03f70d9397e077185050a
-SHA512 (openconnect-8.04.tar.gz.asc) = 9b4d4c74b4e179561d2cc9e311472116ad5f47ff0eb57cb8e62e4d2a2fb264e2018a3c4b5c8e464ae300e2ad7758aec2fd6f5565303180dd6d14b7eda839ac5e
+SHA512 (openconnect-8.05.tar.gz) = 3ac9f1fa5a87b06d45c316897c69470264f2fde7525b5b3ef1352041dd0c8ae5eaf5dd325de1bdcf1e5b82e688fec9c36d531da1b75ac3f49896d4186d83aa15
+SHA512 (openconnect-8.05.tar.gz.asc) = a8b292c74919749739d004501a9e2f27bc4e1e100e005e56eca5e54fac17dd6ad3036a72effbcb836a548657dcad05fc120c72a07dd50076624be9ff652ee7e0