diff --git a/.gitignore b/.gitignore
index 8367ae5..fb4eec5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1,4 @@
-/v1*.tar.gz
 /arm-trusted-firmware-*.tar.gz
 /arm-trusted-firmware-*.tar.xz
+/v1*.tar.gz
 /v2.*.tar.gz
diff --git a/arm-trusted-firmware.spec b/arm-trusted-firmware.spec
index 01d1e8a..4c6325b 100644
--- a/arm-trusted-firmware.spec
+++ b/arm-trusted-firmware.spec
@@ -4,13 +4,14 @@
 %global debug_package %{nil}
 
 Name:    arm-trusted-firmware
-Version: 2.7
-Release: 2%{?candidate:.%{candidate}}%{?dist}
+Version: 2.8
+Release: 1%{?candidate:.%{candidate}}%{?dist}
 Summary: ARM Trusted Firmware
 License: BSD
 URL:     https://github.com/ARM-software/arm-trusted-firmware/wiki
-Source0: https://github.com/ARM-software/arm-trusted-firmware/archive/v%{version}%{?candidate:-%{candidate}}.tar.gz
+Source0: https://github.com/ARM-software/arm-trusted-firmware/archive/v%{version}%{?candidate:-%{candidate}}.tar.gz#/%{name}-%{version}%{?candidate:-%{candidate}}.tar.gz
 Source1: aarch64-bl31
+Patch0:  atf-2.8-fix-linking.patch
 
 # At the moment we're only building on aarch64
 ExclusiveArch: aarch64
@@ -99,6 +100,9 @@ done
 %endif
 
 %changelog
+* Thu Nov 24 2022 Peter Robinson <pbrobinson@fedoraproject.org> - 2.8-1
+- Update to 2.8
+
 * Wed Jul 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 2.7-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
 
diff --git a/atf-2.8-fix-linking.patch b/atf-2.8-fix-linking.patch
new file mode 100644
index 0000000..09357a4
--- /dev/null
+++ b/atf-2.8-fix-linking.patch
@@ -0,0 +1,11 @@
+--- arm-trusted-firmware-2.8/Makefile.orig	2022-11-24 12:09:34.740595091 +0000
++++ arm-trusted-firmware-2.8/Makefile	2022-11-24 12:11:00.923109191 +0000
+@@ -442,7 +442,7 @@
+ 
+ # LD = gcc-ld (ld) or llvm-ld (ld.lld) or other
+ else
+-TF_LDFLAGS		+=	--fatal-warnings -O1
++TF_LDFLAGS		+=	--fatal-warnings -O1 --no-warn-rwx-segments
+ TF_LDFLAGS		+=	--gc-sections
+ # ld.lld doesn't recognize the errata flags,
+ # therefore don't add those in that case
diff --git a/sources b/sources
index bedb005..488b180 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (v2.7.tar.gz) = ff9bd87bf74653275ef9abdf2079974c214e13bd1861bdb3dc4240bdf7e972f3a91c8c6ef86e26afcffe51b29b856c8cf6ffb3d4150d7ccd6a4d3b696bb6f55f
+SHA512 (arm-trusted-firmware-2.8.tar.gz) = db889d209a4ea33e08c2a6c08ad1e58a858298bd6ecdb4396195779a4a5c1745a91e399505c09de33e040fcbc87d363b45f68440cd79fa8ae9a8dacc6191f245