diff --git a/.gitignore b/.gitignore
index 616978e..2c2fc4a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -33,3 +33,4 @@
 /urllib3-1.26.5.tar.gz
 /urllib3-1.26.6.tar.gz
 /urllib3-1.26.7.tar.gz
+/urllib3-1.26.8.tar.gz
diff --git a/python-urllib3.spec b/python-urllib3.spec
index e293bb4..242c106 100644
--- a/python-urllib3.spec
+++ b/python-urllib3.spec
@@ -4,8 +4,8 @@
 %bcond_without tests
 
 Name:           python-%{srcname}
-Version:        1.26.7
-Release:        2%{?dist}
+Version:        1.26.8
+Release:        1%{?dist}
 Summary:        Python HTTP library with thread-safe connection pooling and file post
 
 License:        MIT
@@ -113,6 +113,9 @@ ln -s %{python3_sitelib}/__pycache__/six.cpython-%{python3_version_nodots}.pyc \
 
 
 %changelog
+* Sat Jan 08 2022 Kevin Fenzi <kevin@scrye.com> - 1.26.8-1
+- Update to 1.26.8. Fixes rhbz#2038246
+
 * Tue Jan 04 2022 Adam Williamson <awilliam@redhat.com> - 1.26.7-2
 - Stop unbundling ssl.match_hostname, it's deprecated upstream (#2009550)
 
diff --git a/sources b/sources
index 1ffeae7..62c58a2 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (urllib3-1.26.7.tar.gz) = 5a0f55cba31c987c416d113ddfd4ade64704f70e4ff20092ff6d7370f260dada71e149b14ea62c8967a4c0f5ad79b441325d623446e0016c133c7e9277d3c8be
+SHA512 (urllib3-1.26.8.tar.gz) = 7ba3c3f48315d0f2ef3f2fbdef2b9e508a4af4e9c9f805b96bab2f47d5d35dc29672a16f2163a0ba375ea01bbc005052481ead37dfdcba18f22e90e03616b6d5