diff --git a/.gitignore b/.gitignore
index 6f07a21..7635733 100644
--- a/.gitignore
+++ b/.gitignore
@@ -55,3 +55,4 @@ haproxy-1.4.8.tar.gz
 /haproxy-1.8.14.tar.gz
 /haproxy-1.8.15.tar.gz
 /haproxy-1.8.16.tar.gz
+/haproxy-1.8.17.tar.gz
diff --git a/haproxy.spec b/haproxy.spec
index db6504f..cbac645 100644
--- a/haproxy.spec
+++ b/haproxy.spec
@@ -7,7 +7,7 @@
 %global _hardened_build 1
 
 Name:           haproxy
-Version:        1.8.16
+Version:        1.8.17
 Release:        1%{?dist}
 Summary:        HAProxy reverse proxy for high availability environments
 
@@ -135,6 +135,10 @@ exit 0
 %{_mandir}/man1/*
 
 %changelog
+* Wed Jan 09 2019 Ryan O'Hara <rohara@redhat.com> - 1.8.17-1
+- Update to 1.8.17
+- Fix handling of priority flag in HEADERS frame in HTTP/2 decoder (CVE-2018-20615)
+
 * Sat Dec 22 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.16-1
 - Update to 1.8.16
 
diff --git a/sources b/sources
index ddf2934..ec1990a 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (haproxy-1.8.16.tar.gz) = ae2ba88f62efaa5fdf56dde68305a18709a58b4fed9bc4d6c75f85be8932026aeb3fafe3de6d9d40a0a86b50e93e6a8206a7281d7561590e576fcf368b421598
+SHA512 (haproxy-1.8.17.tar.gz) = 0887d5d84c2cce9355fae032ba82e4b7b94c89d3053f209046a555101b5750c10b51feb38fd14245f806fb4f50ec1dcdf2b23b4f80578abd4a27693fc29b91b1