diff --git a/.gitignore b/.gitignore
index 81537cd..4f72f8b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -7,3 +7,4 @@
 /NetworkManager-1.40.2.tar.xz
 /NetworkManager-1.40.4.tar.xz
 /NetworkManager-1.40.6.tar.xz
+/NetworkManager-1.40.8.tar.xz
diff --git a/NetworkManager.spec b/NetworkManager.spec
index b6a1dbd..5bbdce7 100644
--- a/NetworkManager.spec
+++ b/NetworkManager.spec
@@ -4,7 +4,7 @@
 %global glib2_version %(pkg-config --modversion glib-2.0 2>/dev/null || echo bad)
 
 %global epoch_version 1
-%global real_version 1.40.6
+%global real_version 1.40.8
 %global rpm_version %{real_version}
 %global release_version 1
 %global snapshot %{nil}
@@ -1231,6 +1231,10 @@ fi
 
 
 %changelog
+* Fri Dec 16 2022 Lubomir Rintel <lkundrak@v3.sk> - 1:1.40.8-1
+- Update to 1.40.8 release
+- macsec: fix tracking of parent ifindex (rh #2122564)
+
 * Wed Nov 30 2022 Thomas Haller <thaller@redhat.com> - 1:1.40.6-1
 - Update to 1.40.6 release
 - team: fix configuring empty team port settings (rh #2102375)
diff --git a/sources b/sources
index 3b3ac7b..3ae83c8 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (NetworkManager-1.40.6.tar.xz) = cd8ced0598ea4224cfde23a157108c872bb3935e539029571110b6a0bb4bf3637ad8e3afe8e5f162890ed557e8b42a803bc4e18db00e1de840dd0fa20643e036
+SHA512 (NetworkManager-1.40.8.tar.xz) = 1c3f986c0f37160fced3cc790f6e569ae2185aec2bb2b5ef9635848ba493d4e920cc7ea83cd34a8df7bc12902d071238f9ae6aeb7721658ac54ba862f7c822ef