diff --git a/yast2-security-4.2.5.tar.bz2 b/yast2-security-4.2.5.tar.bz2
deleted file mode 100644
index baa9783..0000000
--- a/yast2-security-4.2.5.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:223f2ae7caf9311d9e5657bbf49d20200f4d88a92134b7d065845641495692b2
-size 66871
diff --git a/yast2-security-4.2.8.tar.bz2 b/yast2-security-4.2.8.tar.bz2
new file mode 100644
index 0000000..1c0958d
--- /dev/null
+++ b/yast2-security-4.2.8.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:be42c4a1eaf55efcc57906a6233f9621e8e60757b574f2d03c19d75f387c7e1b
+size 67559
diff --git a/yast2-security.changes b/yast2-security.changes
index 4c3b2d6..039c4cf 100644
--- a/yast2-security.changes
+++ b/yast2-security.changes
@@ -1,3 +1,27 @@
+-------------------------------------------------------------------
+Thu Dec 12 12:01:35 CET 2019 - schubi@suse.de
+
+- Added to rnc file: sys_gid_max, sys_gid_min, sys_uid_max,
+  sys_uid_min, hibernate_system, kernel.sysrq, mandatory_services,
+  net.ipv4.ip_forward, net.ipv4.tcp_syncookies,
+  net.ipv6.conf.all.forwarding (bsc#1158301).
+- 4.2.8
+
+-------------------------------------------------------------------
+Mon Nov 25 11:27:11 UTC 2019 - Imobach Gonzalez Sosa <igonzalezsosa@suse.com>
+
+- bsc#1155735, bsc#1157541:
+  - Read /usr/etc/login.defs.
+  - Write login.defs configuration to /etc/login.defs.d/.
+- 4.2.7
+
+-------------------------------------------------------------------
+Fri Nov 22 12:21:59 UTC 2019 - Imobach Gonzalez Sosa <igonzalezsosa@suse.com>
+
+- Change default encryption method from DES to SHA512 (bsc#1157541,
+  CVE-2019-3700).
+- 4.2.6
+
 -------------------------------------------------------------------
 Fri Oct 18 13:06:46 CEST 2019 - schubi@suse.de
 
diff --git a/yast2-security.spec b/yast2-security.spec
index 5129c4e..3318b66 100644
--- a/yast2-security.spec
+++ b/yast2-security.spec
@@ -17,7 +17,7 @@
 
 
 Name:           yast2-security
-Version:        4.2.5
+Version:        4.2.8
 Release:        0
 Summary:        YaST2 - Security Configuration
 License:        GPL-2.0-only
@@ -34,8 +34,8 @@ BuildRequires:  yast2-devtools >= 4.2.2
 BuildRequires:  yast2-pam
 BuildRequires:  rubygem(%{rb_default_ruby_abi}:rspec)
 BuildRequires:  rubygem(%{rb_default_ruby_abi}:yast-rake) >= 0.2.5
-# Yast2::CFA::Sysctl
-BuildRequires:  yast2 >= 4.2.25
+# CFA::LoginDefsConfig
+BuildRequires:  yast2 >= 4.2.39
 # Unfortunately we cannot move this to macros.yast,
 # bcond within macros are ignored by osc/OBS.
 %bcond_with yast_run_ci_tests
@@ -45,8 +45,8 @@ BuildRequires:  rubygem(%{rb_default_ruby_abi}:yast-rake-ci)
 
 # new Pam.ycp API
 Requires:       yast2-pam >= 2.14.0
-# CFA::Sysctl
-Requires:       yast2 >= 4.2.25
+# CFA::LoginDefsConfig
+Requires:       yast2 >= 4.2.39
 Requires:       yast2-ruby-bindings >= 1.0.0
 
 Provides:       y2c_sec