diff --git a/.gitignore b/.gitignore
index 1f2d404..d638e66 100644
--- a/.gitignore
+++ b/.gitignore
@@ -21,3 +21,4 @@ bugzilla-3.6.1.tar.gz
 /bugzilla-4.4.4.tar.gz
 /bugzilla-4.4.5.tar.gz
 /bugzilla-4.4.6.tar.gz
+/bugzilla-4.4.8.tar.gz
diff --git a/bugzilla.spec b/bugzilla.spec
index 5a0b1ec..c6377c5 100644
--- a/bugzilla.spec
+++ b/bugzilla.spec
@@ -4,9 +4,9 @@
 Summary: Bug tracking system
 URL: http://www.bugzilla.org/
 Name: bugzilla
-Version: 4.4.6
+Version: 4.4.8
 Group: Applications/Publishing
-Release: 2%{?dist}
+Release: 1%{?dist}
 License: MPLv1.1
 Source0: http://ftp.mozilla.org/pub/mozilla.org/webtools/bugzilla-%{version}.tar.gz
 Source1: bugzilla-httpd-conf
@@ -226,6 +226,10 @@ popd > /dev/null)
 %{bzinstallprefix}/bugzilla/contrib/Bugzilla.pm
 
 %changelog
+* Sat Jan 31 2015 Emmanuel Seyman <emmanuel@seyman.fr> - 4.4.8-1
+- Update to 4.4.8 (fixes regressions in 4.4.7 which itself
+  fixed security flaws) (CVE-2014-1571, CVE-2014-8630)
+
 * Sun Jan 04 2015 Emmanuel Seyman <emmanuel@seyman.fr> - 4.4.6-2
 - Remove bundled binary files (#1000245)
 - Add webdot directory perms to apache configuration
diff --git a/sources b/sources
index b71ddb2..b0f7553 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-3e0553c67cbe33f8ae12dfe79a02ecdc  bugzilla-4.4.6.tar.gz
+86aed922fc99aee0498f864f18d9be96  bugzilla-4.4.8.tar.gz