diff --git a/python-urllib3.changes b/python-urllib3.changes
index eca1f3e..7dae588 100644
--- a/python-urllib3.changes
+++ b/python-urllib3.changes
@@ -1,3 +1,21 @@
+-------------------------------------------------------------------
+Mon Jan 10 22:41:38 UTC 2022 - Dirk Müller <dmueller@suse.com>
+
+- update to 1.26.8:
+  * Added extra message to``urllib3.exceptions.ProxyError`` when urllib3 detects that
+    a proxy is configured to use HTTPS but the proxy itself appears to only use HTTP.
+  * Added a mention of the size of the connection pool when discarding a
+    connection due to the pool being full.
+  * Added explicit support for Python 3.11.
+  * Deprecated the ``Retry.MAX_BACKOFF`` class property in favor of
+    ``Retry.DEFAULT_MAX_BACKOFF`` to better match the rest of the default parameter names.
+    ``Retry.MAX_BACKOFF`` is removed in v2.0.
+  * Changed location of the vendored ``ssl.match_hostname`` function from
+    ``urllib3.packages.ssl_match_hostname`` to
+    ``urllib3.util.ssl_match_hostname`` to ensure Python 3.10+ compatibility after
+    being repackaged by downstream distributors.
+  * Fixed absolute imports, all imports are now relative.
+
 -------------------------------------------------------------------
 Tue Oct 26 21:02:38 UTC 2021 - Dirk Müller <dmueller@suse.com>
 
diff --git a/python-urllib3.spec b/python-urllib3.spec
index 1c78ce2..6f8e194 100644
--- a/python-urllib3.spec
+++ b/python-urllib3.spec
@@ -1,7 +1,7 @@
 #
 # spec file
 #
-# Copyright (c) 2021 SUSE LLC
+# Copyright (c) 2022 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -27,15 +27,13 @@
 %bcond_with test
 %endif
 Name:           python-urllib3%{psuffix}
-Version:        1.26.7
+Version:        1.26.8
 Release:        0
 Summary:        HTTP library with thread-safe connection pooling, file post, and more
 License:        MIT
 Group:          Development/Languages/Python
 URL:            https://urllib3.readthedocs.org/
 Source:         https://files.pythonhosted.org/packages/source/u/urllib3/urllib3-%{version}.tar.gz
-# Wrapper for ssl to unbundle ssl_match_hostname
-Source1:        ssl_match_hostname_py3.py
 # PATCH-FIX-UPSTREAM remove_mock.patch gh#urllib3/urllib3#2108 mcepl@suse.com
 # remove dependency on the external module mock
 Patch0:         remove_mock.patch
@@ -110,10 +108,6 @@ rm -r test/appengine/
 
 # Unbundle the Python 3 build
 rm %{buildroot}/%{python3_sitelib}/urllib3/packages/six.py
-rm -r %{buildroot}/%{python3_sitelib}/urllib3/packages/ssl_match_hostname/
-
-# Copy ssl_match_hostname.py before compilation, so we can have a pyc too
-cp -a %{SOURCE1} %{buildroot}/%{python3_sitelib}/urllib3/packages/ssl_match_hostname.py
 
 %{python_expand \
 $python -m compileall -d %{$python_sitelib} %{buildroot}%{$python_sitelib}/urllib3/
diff --git a/ssl_match_hostname_py3.py b/ssl_match_hostname_py3.py
deleted file mode 100644
index 963d16e..0000000
--- a/ssl_match_hostname_py3.py
+++ /dev/null
@@ -1 +0,0 @@
-from ssl import match_hostname, CertificateError
diff --git a/urllib3-1.26.7.tar.gz b/urllib3-1.26.7.tar.gz
deleted file mode 100644
index 2c737a0..0000000
--- a/urllib3-1.26.7.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:4987c65554f7a2dbf30c18fd48778ef124af6fab771a377103da0585e2336ece
-size 291350
diff --git a/urllib3-1.26.8.tar.gz b/urllib3-1.26.8.tar.gz
new file mode 100644
index 0000000..e8f012a
--- /dev/null
+++ b/urllib3-1.26.8.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:0e7c33d9a63e7ddfcb86780aac87befc2fbddf46c58dbb487e0855f7ceec283c
+size 294280