diff --git a/.cvsignore b/.cvsignore
index 98e8236..f25d68e 100644
--- a/.cvsignore
+++ b/.cvsignore
@@ -1 +1 @@
-gjots2-2.3.7.tgz
+gjots2-2.3.8.tgz
diff --git a/gjots2.spec b/gjots2.spec
index 5f2fc73..071c442 100644
--- a/gjots2.spec
+++ b/gjots2.spec
@@ -1,6 +1,6 @@
 %{!?python_sitelib: %define python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")}
 
-# $Id: gjots2.spec,v 1.10 2008/09/01 08:53:09 rvokal Exp $
+# $Id: gjots2.spec,v 1.11 2008/11/07 12:48:48 rvokal Exp $
 #   Copyright (C) 2002-2005 Robert Hepple 
 #
 #   This program is free software; you can redistribute it and/or
@@ -20,7 +20,7 @@
 
 Summary: A note jotter - Organise your ideas, notes, facts in a hierarchy
 Name: gjots2
-Version: 2.3.7
+Version: 2.3.8
 Release: 1%{?dist}
 URL: http://bhepple.freeshell.org/gjots
 Source: http://bhepple.freeshell.org/gjots/%{name}-%{version}.tgz
@@ -134,6 +134,11 @@ desktop-file-install --vendor fedora                            \
 %{_mandir}/man1/docbook2gjots*
 
 %changelog
+* Fri Nov  7 2008 Radek Vokál <rvokal@redhat.com> 2.3.8-1
+- update to 2.3.8
+- fix for gpg encrypted file handling  (#464476)
+- fixed vulnerability when processing a gpg password  (#464510)
+
 * Mon Sep  1 2008 Radek Vokál <rvokal@redhat.com> 2.3.7-1
 - fix requires
 - update to 2.3.7
diff --git a/sources b/sources
index bb00ecf..cf7e0a4 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-08009c78a1680ff1e2aa52f1881ed892  gjots2-2.3.7.tgz
+1061044c828771c4f17f677f48a38cd4  gjots2-2.3.8.tgz