diff --git a/.gitignore b/.gitignore
index bee4583..b7ff9ff 100644
--- a/.gitignore
+++ b/.gitignore
@@ -42,3 +42,4 @@
 /cacti-1.2.5.tar.gz
 /cacti-1.2.6.tar.gz
 /cacti-1.2.7.tar.gz
+/cacti-1.2.8.tar.gz
diff --git a/cacti.spec b/cacti.spec
index c51eb9d..712d76f 100644
--- a/cacti.spec
+++ b/cacti.spec
@@ -1,7 +1,7 @@
 %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}-%{version}}
 
 Name: cacti
-Version: 1.2.7
+Version: 1.2.8
 Release: 1%{?dist}
 Summary: An rrd based graphing tool
 License: GPLv2+
@@ -210,6 +210,10 @@ fi
 %ghost %{_datadir}/%{name}/resource.rpmmoved
 
 %changelog
+* Wed Dec 11 2019 Morten Stevens <mstevens@fedoraproject.org> - 1.2.8-1
+- Update to 1.2.8
+- CVE-2019-17357, CVE-2019-17358, CVE-2019-16723
+
 * Sat Nov 30 2019 Morten Stevens <mstevens@fedoraproject.org> - 1.2.7-1
 - Update to 1.2.7
 
diff --git a/sources b/sources
index 1c57c32..ac6ab9a 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (cacti-1.2.7.tar.gz) = 2fc31342aa23b4fa98e6f3cf6b7e42f8cf98f272232a1bceb1b256b2104ea26445c1be1c1ff83bf20d293a3c1e7a21eb3a871623f78069aea9b21151ac57a243
+SHA512 (cacti-1.2.8.tar.gz) = e24d9de47a06c1741c7bcfe5c5f68a5a0f0cc2eb859fc930ced28f797f84ad537ff1a0a703dc8c26735cc4b54ba09699e33a30ac666e1f8ec2ec26ae4ceccde3