diff --git a/.gitignore b/.gitignore
index 047eadb..003a4e4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -17,3 +17,4 @@
 /mbedtls-2.7.5-apache.tgz
 /mbedtls-2.7.6-apache.tgz
 /mbedtls-2.7.7-apache.tgz
+/mbedtls-2.7.8-apache.tgz
diff --git a/mbedtls.spec b/mbedtls.spec
index 31843cb..3063b37 100644
--- a/mbedtls.spec
+++ b/mbedtls.spec
@@ -3,7 +3,7 @@
 %endif
 
 Name: mbedtls
-Version: 2.7.7
+Version: 2.7.8
 Release: 1%{?dist}
 Summary: Light-weight cryptographic and SSL/TLS library
 Group: System Environment/Libraries
@@ -122,6 +122,10 @@ LD_LIBRARY_PATH=$PWD/library ctest --output-on-failure -V
 %doc apidoc/*
 
 %changelog
+* Fri Dec 07 2018 Morten Stevens <mstevens@fedoraproject.org> - 2.7.8-1
+- Update to 2.7.8
+- CVE-2018-19608 (#1656785)
+
 * Mon Dec 03 2018 Morten Stevens <mstevens@fedoraproject.org> - 2.7.7-1
 - Update to 2.7.7
 
diff --git a/sources b/sources
index 7021404..90f56e8 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (mbedtls-2.7.7-apache.tgz) = 0de0818f692b6f6a5a82aa323519a24c97398103c23c7a88bf62b82ed5c20ea0e45eae1c5bb90f1aff9a3ff0ebf5df74a67a36b0765703a8622dd90130d64384
+SHA512 (mbedtls-2.7.8-apache.tgz) = 4bb0deb4f1005655cc118f1bd7850089ba6dbe6a8d98a3b5b6fac98477685f21dee26c4c595027b3a02f7611c5469df39fce998e3d28ccf373d5335ccee47ec7