diff --git a/_service b/_service
index 7cf3e1a..2dcd3cd 100644
--- a/_service
+++ b/_service
@@ -6,7 +6,7 @@
@PARENT_TAG@~git@TAG_OFFSET@.%h
v(.*)
\1
- v1.8.15
+ v1.8.17
enable
diff --git a/_servicedata b/_servicedata
index ccea970..3a26135 100644
--- a/_servicedata
+++ b/_servicedata
@@ -5,4 +5,4 @@
http://git.haproxy.org/git/haproxy-1.7.git
640d526f8cdad00f7f5043b51f6a34f3f6ebb49f
http://git.haproxy.org/git/haproxy-1.8.git
- 6b6a350afe3b08a1a60c80fe9120a1c9d10448ef
\ No newline at end of file
+ e89d25b22da1eefa88ef5aa8ad6fa21e1bd4c801
\ No newline at end of file
diff --git a/haproxy-1.8.15~git0.6b6a350a.tar.gz b/haproxy-1.8.15~git0.6b6a350a.tar.gz
deleted file mode 100644
index dab352b..0000000
--- a/haproxy-1.8.15~git0.6b6a350a.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:954781a7635954548bb190e1bf4fd75a193710e5194a1540055cff3f4703284d
-size 2134976
diff --git a/haproxy-1.8.17~git0.e89d25b2.tar.gz b/haproxy-1.8.17~git0.e89d25b2.tar.gz
new file mode 100644
index 0000000..1927e84
--- /dev/null
+++ b/haproxy-1.8.17~git0.e89d25b2.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:50043f997c24eb13075562131ba42f8d173e09964f231995a8c5309eadeacf55
+size 2137195
diff --git a/haproxy.changes b/haproxy.changes
index c03711f..0ce1e58 100644
--- a/haproxy.changes
+++ b/haproxy.changes
@@ -1,3 +1,23 @@
+-------------------------------------------------------------------
+Thu Jan 10 08:42:33 UTC 2019 - kgronlund@suse.com
+
+- Update to version 1.8.17~git0.e89d25b2 (bsc#1121283) (CVE-2018-20615):
+ * BUG/CRITICAL: mux-h2: re-check the frame length when PRIORITY is used
+ * BUG/MEDIUM: lua: dead lock when Lua tasks are trigerred
+ * BUG/MINOR: lua: bad args are returned for Lua actions
+ * BUG/MINOR: lua: Return an error if a legacy HTTP applet doesn't send anything
+ * BUG/MEDIUM: cli: make "show sess" really thread-safe
+ * MINOR: stream/cli: report more info about the HTTP messages on "show sess all"
+ * MINOR: stream/cli: fix the location of the waiting flag in "show sess all"
+ * MINOR: lb: allow redispatch when using consistent hash
+ * BUG/MEDIUM: server: Also copy "check-sni" for server templates.
+ * BUG/MEDIUM: mux-h2: mark that we have too many CS once we have more than the max
+ * MINOR: mux-h2: only increase the connection window with the first update
+ * BUG/MAJOR: stream-int: Update the stream expiration date in stream_int_notify()
+ * BUG/MEDIUM: dns: overflowed dns name start position causing invalid dns error
+ * BUG/MEDIUM: dns: Don't prevent reading the last byte of the payload in dns_validate_response()
+ * BUG/MINOR: logs: leave startup-logs global and not per-thread
+
-------------------------------------------------------------------
Mon Dec 17 09:42:18 UTC 2018 - kgronlund@suse.com
diff --git a/haproxy.spec b/haproxy.spec
index 8deda2d..0c866e7 100644
--- a/haproxy.spec
+++ b/haproxy.spec
@@ -47,7 +47,7 @@
%endif
Name: haproxy
-Version: 1.8.15~git0.6b6a350a
+Version: 1.8.17~git0.e89d25b2
Release: 0
#
#