diff --git a/sources b/sources
index 19c650f..1a8ede5 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (squid-4.7.tar.xz) = fa6b483c7563f5e9c40a4d8a3e306e90a5baaca408e98e1a5165767f6c22db2fc6c98ba6f8d60f2373f68da7bcd271ec2f924eb9ecb35c97711db57feaaf8585
-SHA512 (squid-4.7.tar.xz.asc) = a256ea157b47176246289047db5e2a39921e435943777c7b109571b266f5a2dcb118e57a14107ad08ad258d47f39ff8b32c21fbf3e65e08fe160b5a1d54ae719
+SHA512 (squid-4.8.tar.xz) = 2223f299950ded074faca6e3d09c15bc26e8644c3019b36a612f5d424e25b02a528c4b3c8a9463864f71edc29f17c5662f16ffda18c76317405cb97657e5e823
+SHA512 (squid-4.8.tar.xz.asc) = ddc9b5cf414691ad7794f2fe9871a3e3f06078030e1a8cf54bcc05896ce4dd62da7a5612f143a445521228772406c8c80f2ea4e61271a0507bf02e67fd3cf368
diff --git a/squid.spec b/squid.spec
index ae103e9..b18e3c0 100644
--- a/squid.spec
+++ b/squid.spec
@@ -1,8 +1,8 @@
 %define __perl_requires %{SOURCE98}
 
 Name:     squid
-Version:  4.7
-Release:  6%{?dist}
+Version:  4.8
+Release:  1%{?dist}
 Summary:  The Squid proxy caching server
 Epoch:    7
 # See CREDITS for breakdown of non GPLv2+ code
@@ -284,6 +284,11 @@ fi
 
 
 %changelog
+* Wed Jul 10 2019 Lubos Uhliarik <luhliari@redhat.com> - 7:4.8-1
+- new version 4.8
+- Resolves: #1727745 - squid: CVe-2019-13345 squid: XSS via user_name or auth
+  parameter in cachemgr.cgi
+
 * Tue Jul 02 2019 Lubos Uhliarik <luhliari@redhat.com> - 7:4.7-6
 - fix filepath to squid.conf.documented in squid's manpage
 - fix path to systemctl in nm script