diff --git a/.cvsignore b/.cvsignore
index e1a3df9..0967a40 100644
--- a/.cvsignore
+++ b/.cvsignore
@@ -5,3 +5,4 @@ sendmail.8.13.4.tar.gz
 sendmail.8.13.5.tar.gz
 sendmail.8.13.6.tar.gz
 sendmail.8.13.7.tar.gz
+sendmail.8.13.8.tar.gz
diff --git a/sendmail.spec b/sendmail.spec
index a58d786..459db6e 100644
--- a/sendmail.spec
+++ b/sendmail.spec
@@ -17,8 +17,8 @@
 
 Summary: A widely used Mail Transport Agent (MTA).
 Name: sendmail
-Version: 8.13.7
-Release: 3.1
+Version: 8.13.8
+Release: 1
 License: Sendmail
 Group: System Environment/Daemons
 Provides: smtpdaemon
@@ -587,6 +587,10 @@ exit 0
 %{_docdir}/sendmail
 
 %changelog
+* Fri Sep  1 2006 Thomas Woerner <twoerner@redhat.com> 8.13.8-1
+- new version 8.13.8 fixes CVE-2006-4434 (denial of service via a long header
+  line)
+
 * Thu Jul 20 2006 Thomas Woerner <twoerner@redhat.com> 8.13.7-3.1
 - dropped chown of /etc/mail/authinfo.db (#199455)
 
diff --git a/sources b/sources
index b2e7b31..2bf6ec0 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-5327e065cb0c1919122c8cecbeddbc28  sendmail.8.13.7.tar.gz
+5f29c94b42e0bb74d546b2ae84203a1e  sendmail.8.13.8.tar.gz