diff --git a/.gitignore b/.gitignore
index 2c5389e..4de3906 100644
--- a/.gitignore
+++ b/.gitignore
@@ -11,3 +11,4 @@
 /Django-1.5.3.tar.gz
 /Django-1.5.4.tar.gz
 /Django-1.5.6.tar.gz
+/Django-1.5.8.tar.gz
diff --git a/python-django.spec b/python-django.spec
index 6cdf6c5..cd647e8 100644
--- a/python-django.spec
+++ b/python-django.spec
@@ -16,7 +16,7 @@
 %global         obs_ver 1.4.8-1
 
 Name:           python-django
-Version:        1.5.6
+Version:        1.5.8
 Release:        1%{?dist}
 Summary:        A high-level Python Web framework
 
@@ -599,6 +599,9 @@ popd
 
 
 %changelog
+* Fri May 16 2014 Matthias Runge <mrunge@redhat.com> - 1.5.8-1
+- update to 1.5.8 fixing CVE-2014-1418 (rhbz#1097935)
+
 * Thu Apr 24 2014 Matthias Runge <mrunge@redhat.com> - 1.5.6-1
 - update to 1.5.6 fixing CVE-2014-0473 and CVE-2014-0474
 
diff --git a/sources b/sources
index bed97a4..9954e6c 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-b46fe29c7d26310d19aec6d8666f08c6  Django-1.5.6.tar.gz
+675fc736e2c29090f005e217ccf90b5b  Django-1.5.8.tar.gz