diff --git a/.cvsignore b/.cvsignore
index ab4d923..9a6ba63 100644
--- a/.cvsignore
+++ b/.cvsignore
@@ -1,2 +1,4 @@
 dovecot-1.1.5.tar.gz
 dovecot-sieve-1.1.5.tar.gz
+dovecot-1.1.5.tar.gz.sig
+dovecot-sieve-1.1.5.tar.gz.sig
diff --git a/dovecot.spec b/dovecot.spec
index d34aebb..29eb3be 100644
--- a/dovecot.spec
+++ b/dovecot.spec
@@ -1,7 +1,7 @@
 Summary: Dovecot Secure imap server
 Name: dovecot
 Epoch: 1
-Version: 1.1.3
+Version: 1.1.5
 Release: 1%{?dist}
 License: MIT and LGPLv2 and BSD with advertising
 Group: System Environment/Daemons
@@ -376,6 +376,9 @@ fi
 
 
 %changelog
+* Wed Oct 29 2008 Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.5-1
+- update to upstream version 1.1.5 (Resolves: CVE-2008-4577, CVE-2008-4578)
+
 * Tue Sep  2 2008 Dan Horak <dan[at]danny.cz> - 1:1.1.3-1
 - update to upstream version 1.1.3
 
diff --git a/sources b/sources
index 8699fee..0d42e85 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,4 @@
 64e7809aeee750e7c86d81777078e434  dovecot-1.1.5.tar.gz
 b4362defe3fc18865db8cf8e1c940b13  dovecot-sieve-1.1.5.tar.gz
+e04825c658194f44acd39722d3ef9982  dovecot-1.1.5.tar.gz.sig
+0fdb01f9fd960fbd5a8271584ac62cb8  dovecot-sieve-1.1.5.tar.gz.sig