diff --git a/.gitignore b/.gitignore
index de14a88..5ece557 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,3 +2,4 @@
 /mujs-0827611.tar.gz
 /mujs-5c337af.tar.gz
 /mujs-a0ceaf5.tar.gz
+/mujs-4006739.tar.gz
diff --git a/mujs.spec b/mujs.spec
index ace37bf..46770a7 100644
--- a/mujs.spec
+++ b/mujs.spec
@@ -1,10 +1,10 @@
-%global codate 20161031
-%global cohash a0ceaf5
+%global codate 20170124
+%global cohash 4006739
 %global checkout %{codate}git%{cohash}
 
 Name:           mujs
 Version:        0
-Release:        7.%{checkout}%{?dist}
+Release:        8.%{checkout}%{?dist}
 Summary:        An embeddable Javascript interpreter
 License:        AGPLv3+
 URL:            http://mujs.com/
@@ -54,6 +54,11 @@ make install DESTDIR=%{buildroot} prefix="%{_prefix}" libdir="%{_libdir}"
 %{_libdir}/lib%{name}.a
 
 %changelog
+* Tue Feb 14 2017 Petr Šabata <contyk@redhat.com> - 0-8.20170124git4006739
+- Include the latest upstream Fixes
+- Fixes CVE-2016-10132, CVE-2016-10133, CVE-2016-10141, CVE-2017-5627 and
+  CVE-2017-5628
+
 * Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0-7.20161031gita0ceaf5
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
 
diff --git a/sources b/sources
index 6bd06eb..b021572 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-635580e309a91c64d4fde25fd75cc40b  mujs-a0ceaf5.tar.gz
+SHA512 (mujs-4006739.tar.gz) = d52e1006777e25e04271ec8910c2607b160e58b5fce160ed310fcb6430f1ed4a1554fab57be4651ca6fc90320e70e9a2f36a9e4ae63df0f90f16cb2c4bb965a4