diff --git a/ruby-1.8.7-p352.tar.bz2 b/ruby-1.8.7-p352.tar.bz2
deleted file mode 100644
index 6e0daaf..0000000
--- a/ruby-1.8.7-p352.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:9df4e9108387f7d24a6ab8950984d0c0f8cdbc1dad63194e744f1a176d1c5576
-size 4207576
diff --git a/ruby-1.8.7-p357.tar.bz2 b/ruby-1.8.7-p357.tar.bz2
new file mode 100644
index 0000000..14d903a
--- /dev/null
+++ b/ruby-1.8.7-p357.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5c64b63a597b4cb545887364e1fd1e0601a7aeb545e576e74a6d8e88a2765a37
+size 4208157
diff --git a/ruby.changes b/ruby.changes
index 0e8202d..e298ab5 100644
--- a/ruby.changes
+++ b/ruby.changes
@@ -1,10 +1,28 @@
+-------------------------------------------------------------------
+Thu Dec 29 01:40:14 UTC 2011 - mrueckert@suse.de
+
+- update to 1.8.7.p357
+  - randomize hash to avoid algorithmic complexity attacks.
+    CVE-2011-4815
+  - initialization of hash_seed to be at the beginning of the
+    process.
+  - initialize random seed at first.
+  - call OpenSSL::Random.seed at the SecureRandom.random_bytes
+    call.  insert separators for array join.  patch by Masahiro
+    Tomita.  [ruby-dev:44270]
+  - mkconfig.rb: fix for continued lines.  based on a patch from
+    Marcus Rueckert <darix AT opensu.se> at [ruby-core:20420].
+  - Infinity is greater than any bignum number.  [ruby-dev:38672]
+  - initialize store->ex_data.sk.  [ruby-core:28907]
+    [ruby-core:23971] [ruby-core:18121]
+
 -------------------------------------------------------------------
 Thu Dec  1 17:03:34 UTC 2011 - coolo@suse.com
 
 - add automake as buildrequire to avoid implicit dependency
 
 -------------------------------------------------------------------
-Thu Jul  7 13:02:17 UTC 2011 - mrueckert@suse.com
+Thu Jul  7 13:02:17 UTC 2011 - mrueckert@suse.de
 
 - update to 1.8.7.p352
   - support for openssl compiled without SSLv2
diff --git a/ruby.spec b/ruby.spec
index f10d743..83a688a 100644
--- a/ruby.spec
+++ b/ruby.spec
@@ -18,11 +18,11 @@
 # norootforbuild
 
 Name:           ruby
-Version:        1.8.7.p352
+Version:        1.8.7.p357
 Release:        0
 #
 %define pkg_version 1.8.7
-%define patch_level p352
+%define patch_level p357
 %define rb_arch %(echo %{_target_cpu}-linux | sed -e "s/i686/i586/" -e "s/hppa2.0/hppa/" -e "s/ppc/powerpc/")
 %define rb_ver  %(echo %{pkg_version} | sed -e 's/\\\.[0-9]\\\+$//')
 #