diff --git a/.gitignore b/.gitignore
index 18821c8..fd7f61e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -17,3 +17,4 @@
 /flatpak-0.8.3.tar.xz
 /flatpak-0.8.4.tar.xz
 /flatpak-0.8.5.tar.xz
+/flatpak-0.8.7.tar.xz
diff --git a/flatpak.spec b/flatpak.spec
index 1def77f..bc95402 100644
--- a/flatpak.spec
+++ b/flatpak.spec
@@ -2,7 +2,7 @@
 %global ostree_version 2016.14
 
 Name:           flatpak
-Version:        0.8.5
+Version:        0.8.7
 Release:        1%{?dist}
 Summary:        Application deployment framework for desktop apps
 
@@ -188,6 +188,9 @@ flatpak remote-list --system &> /dev/null || :
 
 
 %changelog
+* Mon Jun 26 2017 David King <amigadave@amigadave.com> - 0.8.7-1
+- Update to 0.8.7 for CVE-2017-9780 (#1465027)
+
 * Mon Apr 03 2017 Kalev Lember <klember@redhat.com> - 0.8.5-1
 - Update to 0.8.5
 
diff --git a/sources b/sources
index da9b4cc..fc5b197 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (flatpak-0.8.5.tar.xz) = 66e42ca14f31b2c4c94400797ddabe8f496a3661405091be6bd8992110743c636245282fbca04fbc56abb2e1bd32e5947c334332001eb3235077e3e70d18a0f4
+SHA512 (flatpak-0.8.7.tar.xz) = c70313df3cb6c7f040e566bf96d65cd7e3c9789f1b1c2d81f8ef26d8c8d1aa17bc45e10de528a315ac59dc027b4ada182b66d062b29a27d366d70e31558b78c9