diff --git a/iptables-1.8.6.tar.bz2 b/iptables-1.8.6.tar.bz2
deleted file mode 100644
index 1e88085..0000000
--- a/iptables-1.8.6.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:a0f4fe0c3eb8faa5bd9c8376d132f340b9558e750c91deb2d5028aa3d0047767
-size 715744
diff --git a/iptables-1.8.6.tar.bz2.sig b/iptables-1.8.6.tar.bz2.sig
deleted file mode 100644
index e9f0023..0000000
Binary files a/iptables-1.8.6.tar.bz2.sig and /dev/null differ
diff --git a/iptables-1.8.7.tar.bz2 b/iptables-1.8.7.tar.bz2
new file mode 100644
index 0000000..1c24da2
--- /dev/null
+++ b/iptables-1.8.7.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c109c96bb04998cd44156622d36f8e04b140701ec60531a10668cfdff5e8d8f0
+size 717862
diff --git a/iptables-1.8.7.tar.bz2.sig b/iptables-1.8.7.tar.bz2.sig
new file mode 100644
index 0000000..e2ba969
Binary files /dev/null and b/iptables-1.8.7.tar.bz2.sig differ
diff --git a/iptables.changes b/iptables.changes
index 08c9c77..2a6e4c4 100644
--- a/iptables.changes
+++ b/iptables.changes
@@ -1,3 +1,16 @@
+-------------------------------------------------------------------
+Fri Jan 15 22:34:25 UTC 2021 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 1.8.7
+  * iptables-nft:
+  * Improved performance when matching on IP/MAC address prefixes
+    if the prefix is byte-aligned. In ideal cases, this doubles
+    packet processing performance.
+  * Dump user-defined chains in lexical order. This way ruleset
+    dumps become stable and easily comparable.
+  * Avoid pointless table/chain creation. For instance,
+    `iptables-nft -L` no longer creates missing base-chains.
+
 -------------------------------------------------------------------
 Sun Nov  1 12:31:34 UTC 2020 - Jan Engelhardt <jengelh@inai.de>
 
diff --git a/iptables.spec b/iptables.spec
index 396a63e..d250b5a 100644
--- a/iptables.spec
+++ b/iptables.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package iptables
 #
-# Copyright (c) 2020 SUSE LLC
+# Copyright (c) 2021 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:           iptables
-Version:        1.8.6
+Version:        1.8.7
 Release:        0
 Summary:        IP packet filter administration utilities
 License:        GPL-2.0-only AND Artistic-2.0