diff --git a/cockpit.spec b/cockpit.spec
index aa065b5..8fc65e7 100644
--- a/cockpit.spec
+++ b/cockpit.spec
@@ -49,7 +49,7 @@ Summary:        Web Console for Linux servers
 License:        LGPL-2.1-or-later
 URL:            https://cockpit-project.org/
 
-Version:        310.7
+Version:        310.8
 Release:        1%{?dist}
 Source0:        https://github.com/cockpit-project/cockpit/releases/download/%{version}/cockpit-%{version}.tar.xz
 Source1:        cockpit.css.gz
@@ -786,6 +786,11 @@ via PackageKit.
 
 # The changelog is automatically generated and merged
 %changelog
+* Wed May 20 2026 Tomas Matus <tmatus@redhat.com> - 310.8-1
+- ws: fix uninitialized read in tls-sniffing code
+- ws: tighten up branding path construction
+- pkg/systemd: robustify argument quoting [CVE-2026-4802] (RHEL-161386)
+
 * Mon Apr 27 2026 Tomas Matus <tmatus@redhat.com> - 310.7-1
 - shell: Determine session idle time and countdown from clock time (RHEL-171011)
 
diff --git a/plans/all.fmf b/plans/all.fmf
index 2c6b393..c3d76bd 100644
--- a/plans/all.fmf
+++ b/plans/all.fmf
@@ -1,7 +1,7 @@
 discover:
     how: fmf
     url: https://github.com/cockpit-project/cockpit
-    ref: "310.7"
+    ref: "310.8"
 execute:
     how: tmt
 
diff --git a/sources b/sources
index e9035cc..cb77fab 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (cockpit-310.7.tar.xz) = 70f41c89a11d5cffa42e9149488390de298317871e9ee54781e3a76fd0a087ee6f01841e80c931c3a8ed8c1934a757106370551de20e2802ffb92d4e1aa3475e
+SHA512 (cockpit-310.8.tar.xz) = 708ca16860a525be1cdf14f15b9e415cbcf639d32a152d6cf716c5e501afe64f8d74e5380258d422621accbe771ae578f33f5b9e6ddd6fa1575a2e9a783bc895
 SHA512 (cockpit.css.gz) = 1851e890e49141c17e498f1472c3bc307439cefaa0f1dccecbfc87b04087af03ca42199c86116c1fcf8890b58ca98f8aecfb01cc8b3c03a76e2685f7bd610568