diff --git a/enigmail-2.0.7.tar.gz b/enigmail-2.0.7.tar.gz
deleted file mode 100644
index 6066de3..0000000
--- a/enigmail-2.0.7.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:5752e6fe0fe2acbfd8f0417c5abe6cf2ec77b76970a71a333b5852b76fe354dd
-size 2537431
diff --git a/enigmail-2.0.7.tar.gz.asc b/enigmail-2.0.7.tar.gz.asc
deleted file mode 100644
index 1a6164f..0000000
--- a/enigmail-2.0.7.tar.gz.asc
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEET5+J9VBawdGiYGMc2xGHud1faTsFAlsf8WsACgkQ2xGHud1f
-aTttzw/8DSxBUvkAeXJulK6ADcMmyK/jiJpn3xYbX6j24JL+dvorpP6mTCvI4cro
-6jELk6AenROy9kEJkXGjONqd2JlCL9nPZ3FLZH1DLden63AEmjol8gYo0+yNzeDI
-U0dF5InX/FyRtACmAqtghzBmqnhkJ9IbS6Q19a56m3kVylRh3OBb61/CmrK43AOr
-5J7caNE4VMcKh4tTCuauW4rvn4YZHvPOg3DBEkWh0LvA+2T6LoSugQNIdYz0ypSQ
-qvkLx2UJ3Y+L6OjMLM/V4dFvrcNZh66dUiPoFdJAP4lZzP0HZQNQw9RX1oADGnKu
-t08ODn+yj97chimbSIUTxLcmFud+6zkqLvCfr8FeEjOwITmJQwAL4sByr0cCoZV6
-vGp5oukyOLsjfLqjlp15wZSw2QGaTTJt16F4E76XlbOp4QGdeCedrDXeDkHLhzTk
-v3xvTkRUamraLnT+kRYadBIdPCShrDundokR3mX0jTiHAJOTUWxjVg7EQyBDjSUO
-tScYa/N5yRTNcaNwYVT6yGFpoUFVHAA1zD6r8fFJosJZu1g/qJgdp/PCwj9Ooci0
-u0gawzsXLG8nnZp72dCbt1CkpiRMMd3Rq+PiC/ARJt5seFi7wWFjr/nz3dBVrfPx
-2yJEghOcqbPnWHb6ESew51j20OYRGNggNIoIOG+QNWg0vc3lWXk=
-=4gP8
------END PGP SIGNATURE-----
diff --git a/enigmail-2.0.8.tar.gz b/enigmail-2.0.8.tar.gz
new file mode 100644
index 0000000..e591a29
--- /dev/null
+++ b/enigmail-2.0.8.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:f6c4f055c7fdaf434739ef807b9a8b1d2a448a11822113d51883d05262d152d7
+size 2525691
diff --git a/enigmail-2.0.8.tar.gz.asc b/enigmail-2.0.8.tar.gz.asc
new file mode 100644
index 0000000..9fff737
--- /dev/null
+++ b/enigmail-2.0.8.tar.gz.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=lmsu
+-----END PGP SIGNATURE-----
diff --git a/enigmail.changes b/enigmail.changes
index b666cdc..b11de23 100644
--- a/enigmail.changes
+++ b/enigmail.changes
@@ -1,3 +1,13 @@
+-------------------------------------------------------------------
+Sun Aug  5 10:52:29 UTC 2018 - michael@stroeder.com
+
+- enigmail 2.0.8:
+  This release addresses a security issue and
+  solves a few regression bugs.
+  * a security issue has been fixed that allows an attacker to prepare
+    a plain, unauthenticated HTML message in a way that it looks like
+    it's signed and/or encrypted (boo#1104036)
+
 -------------------------------------------------------------------
 Wed Jun 13 19:19:16 UTC 2018 - astieger@suse.com
 
diff --git a/enigmail.spec b/enigmail.spec
index a9ffe7c..7897fd1 100644
--- a/enigmail.spec
+++ b/enigmail.spec
@@ -18,7 +18,7 @@
 
 
 Name:           enigmail
-Version:        2.0.7
+Version:        2.0.8
 Release:        0
 Summary:        OpenPGP addon for Thunderbird and SeaMonkey
 License:        MPL-2.0