diff --git a/openvpn-2.4.7.tar.xz b/openvpn-2.4.7.tar.xz
deleted file mode 100644
index 145a651..0000000
--- a/openvpn-2.4.7.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:a42f53570f669eaf10af68e98d65b531015ff9e12be7a62d9269ea684652f648
-size 953116
diff --git a/openvpn-2.4.7.tar.xz.asc b/openvpn-2.4.7.tar.xz.asc
deleted file mode 100644
index 5e5f6b8..0000000
--- a/openvpn-2.4.7.tar.xz.asc
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEEghddNaqNDoveX0+eXcNRgFrP6sYFAlxtSogACgkQXcNRgFrP
-6sZznw/+KDYBVFu2TuBVHQtRLH3y8Y+tG3/1ROVJw1CfXD2Pn1xZpsV532DiHxGU
-eYjDL6ZLl7pgLSblv7QBaTnwbaT1hE2cX3Fg86a+Qzufl5Fn3VDFRQlOcBDxA584
-0R0WLFUGDJNilhMJ/MlFgMuNvzo4iTyctmCDhFG5P5ed9SBQ7zZAOfPkYE8bQqxA
-h3lqlSDioXPOyHIqk6XQpYzzNf3ar4UzUqkBg3CrtEsiN7zB4Om/SkyVMgNr7wMG
-0n7vpZaylhX+Pm3aTQ4eFSyv41R29xrspUo88KzOX2omTgkiy3IRRLmRxfhRNLhm
-KPu+4GjUZUTkdUiAESp+eyRhA0DrxdyD/FsLSx+uEV3aFyMCkf9KUW6tKpDvr4JB
-vxPGJHkB51X//oAiDgDJZnn1lcHdbP62ydULePT4m+B1g5Tti2mUA23t7EcjKvr/
-O3NugKkyTlK+WI1XrO2QuO9crkhq6h41iLRbgjHXlXjv8w4p5yuSqDpQEsAm4RO+
-WvAfZd1LG9a8I8CFK2hwWrxOOv/LfZje+QgoZhUGHLW6Zi/rcvBygT2dKHznxjv5
-6Q1qd0D3cu6/2I/hd3wzjTt3KLrXnLM3n5iScHqJLyN39hEbp94CwXdEqrgpUJB6
-xaPwSfCR18tKKJh00wSJEYqQkWIilX74ZJRCIJ3sOr2RrrBcIDo=
-=FNy+
------END PGP SIGNATURE-----
diff --git a/openvpn-2.4.8.tar.xz b/openvpn-2.4.8.tar.xz
new file mode 100644
index 0000000..c2a6ee8
--- /dev/null
+++ b/openvpn-2.4.8.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:fb8ca66bb7807fff595fbdf2a0afd085c02a6aa47715c9aa3171002f9f1a3f91
+size 952444
diff --git a/openvpn-2.4.8.tar.xz.asc b/openvpn-2.4.8.tar.xz.asc
new file mode 100644
index 0000000..9f6d95e
--- /dev/null
+++ b/openvpn-2.4.8.tar.xz.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=0IJN
+-----END PGP SIGNATURE-----
diff --git a/openvpn.changes b/openvpn.changes
index c92721f..e4e466b 100644
--- a/openvpn.changes
+++ b/openvpn.changes
@@ -1,3 +1,38 @@
+-------------------------------------------------------------------
+Tue Jan  7 21:28:42 UTC 2020 - Bjørn Lie <bjorn.lie@gmail.com>
+
+- Update to version 2.4.8:
+  * mbedtls: fix segfault by calling mbedtls_cipher_free() in
+    cipher_ctx_free()
+  * cleanup: Remove RPM openvpn.spec build approach
+  * docs: Update INSTALL
+  * build: Package missing mock_msg.h
+  * Increase listen() backlog queue to 32
+  * Force combinationation of --socks-proxy and --proto UDP to use
+    IPv4.
+  * Wrong FILETYPE in .rc files
+  * Do not set pkcs11-helper 'safe fork mode'
+  * tests/t_lpback.sh: Switch sed(1) to POSIX-compatible regex.
+  * Fix various compiler warnings
+  * Fix regression, reinstate LibreSSL support.
+  * man: correct the description of --capath and --crl-verify
+    regarding CRLs
+  * Fix typo in NTLM proxy debug message
+  * Ignore --pull-filter for --mode server
+  * openssl: Fix compilation without deprecated OpenSSL 1.1 APIs
+  * Better error message when script fails due to script-security
+    setting
+  * Correct the return value of cryptoapi RSA signature callbacks
+  * Handle PSS padding in cryptoapicert
+  * cmocka: use relative paths
+  * Fix documentation of tls-verify script argument
+
+-------------------------------------------------------------------
+Thu Dec 19 15:30:15 UTC 2019 - Dominique Leuenberger <dimstar@opensuse.org>
+
+- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
+  Allow OBS to shortcut through the -mini flavors.
+
 -------------------------------------------------------------------
 Wed Sep 18 06:52:56 UTC 2019 - Michal Hrusecky <michal.hrusecky@opensuse.org>
 
diff --git a/openvpn.spec b/openvpn.spec
index a8bfb7e..5a19f5a 100644
--- a/openvpn.spec
+++ b/openvpn.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package openvpn
 #
-# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2020 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -29,12 +29,12 @@
 %define _rundir %{_localstatedir}/run
 %endif
 Name:           openvpn
-Version:        2.4.7
+Version:        2.4.8
 Release:        0
 Summary:        Full-featured SSL VPN solution using a TUN/TAP Interface
 License:        SUSE-GPL-2.0-with-openssl-exception AND LGPL-2.1-only
 Group:          Productivity/Networking/Security
-Url:            http://openvpn.net/
+URL:            http://openvpn.net/
 Source:         https://swupdate.openvpn.org/community/releases/openvpn-%{version}.tar.xz
 Source1:        https://swupdate.openvpn.org/community/releases/openvpn-%{version}.tar.xz.asc
 Source2:        %{name}.init
@@ -72,7 +72,7 @@ PreReq:         %insserv_prereq
 BuildRequires:  systemd
 %endif
 %if %{with_systemd}
-BuildRequires:  systemd-devel
+BuildRequires:  pkgconfig(libsystemd)
 %endif
 
 %description