diff --git a/dnsmasq-2.83.tar.xz b/dnsmasq-2.83.tar.xz
deleted file mode 100644
index 093b168..0000000
--- a/dnsmasq-2.83.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ffc1f7e8b05e22d910b9a71d09f1128197292766dc7c54cb7018a1b2c3af4aea
-size 513880
diff --git a/dnsmasq-2.83.tar.xz.asc b/dnsmasq-2.83.tar.xz.asc
deleted file mode 100644
index 84e25aa..0000000
--- a/dnsmasq-2.83.tar.xz.asc
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEE1urL1u5GuDQkjRESFc3aauGRNaIFAmAGqrMACgkQFc3aauGR
-NaK0YBAAph9k8oDA8MnTrDXmGkWWtWks8cEn+DBrE0tSekdehQlPl9jyUwZUUKXI
-3j6qhCVgd9VpwlS810lhU+YTiQoB13f7FR6Bnaps6nYMoi0hUgQrmSyvaQEJ3xmZ
-Vaypvf7DiIQM4Rb95QbWNA684iTE77vwjTiyV+RWFxUyeAXJwH4Dh6AdB74byM+Y
-0WMZqGm6FZQWGI7bCPtW6rLbSZ/5c8szrQxeo6oKo7mCtMaM/nIL5xrTBGwgHK84
-jCKs86ReFeC0dGJZOcEiYWCr6e33CXSD/wl1aw76FefmBVBt1ducAMthURHNiknh
-C7+saiLsgL4UmEPj5xn9gUNx3siz+YSTHjq+9KQNaBACXLCb82UQaH7Os8+0A0Na
-Hhzetyj1LxEbujr4CQrWLU0TwatmJ8jGsGJHdR+IXuBGy+s4NpWxu+SSzBUHe3Je
-DLnIec4XVlj3Hq6zjV1YGWuBMzBCPPp09mmuv4kBLR81+6oGJFQC7T6fK4Vh2qCB
-1vsual+TIHiVWVjRQ/gbGr3SN4XwWC7rlmjXHPEuz47dguf8/2EnU7ADFWI6fGZG
-fmDUXC6Is9U0GH8rZIcoLOZ7CBJuRjzZRCuUjL4wAZ44TaGCHyDiUL4IZ94eNLg+
-kJQtPdgZmpo4EZaaZ8HaXB5zoqp6SK3F3lQB4+w1jUIOkZgQS2A=
-=YQ56
------END PGP SIGNATURE-----
diff --git a/dnsmasq-2.85.tar.xz b/dnsmasq-2.85.tar.xz
new file mode 100644
index 0000000..70c5043
--- /dev/null
+++ b/dnsmasq-2.85.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ad98d3803df687e5b938080f3d25c628fe41c878752d03fbc6199787fee312fa
+size 518316
diff --git a/dnsmasq-2.85.tar.xz.asc b/dnsmasq-2.85.tar.xz.asc
new file mode 100644
index 0000000..f6dbf66
--- /dev/null
+++ b/dnsmasq-2.85.tar.xz.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=W3WM
+-----END PGP SIGNATURE-----
diff --git a/dnsmasq.changes b/dnsmasq.changes
index 0366023..32cf98f 100644
--- a/dnsmasq.changes
+++ b/dnsmasq.changes
@@ -1,3 +1,34 @@
+-------------------------------------------------------------------
+Mon Apr 19 20:46:49 UTC 2021 - Reinhard Max <max@suse.com>
+
+- Update to 2.85:
+  * Fix problem with DNS retries in 2.83/2.84.
+  * Tweak sort order of tags in get-version.
+  * Avoid treating a --dhcp-host which has an IPv6 address as
+    eligible for use with DHCPv4 on the grounds that it has
+    no address, and vice-versa.
+  * Add --dynamic-host option: A and AAAA records which take their
+    network part from the network of a local interface. Useful
+    for routers with dynamically prefixes.
+  * Teach --bogus-nxdomain and --ignore-address to take an IPv4
+    subnet.
+  * CVE-2021-3448, bsc#1183709: Use random source ports where
+    possible if source addresses/interfaces in use.
+  * Change the method of allocation of random source ports for DNS.
+  * Scale the size of the DNS random-port pool based on the
+    value of the --dns-forward-max configuration.
+  * Tweak TFTP code to check sender of all received packets, as
+    specified in RFC 1350 para 4.
+
+-------------------------------------------------------------------
+Mon Feb  8 22:37:20 UTC 2021 - Dirk Müller <dmueller@suse.com>
+
+- update to 2.84:
+  * Change HAVE_NETTLEHASH compile-time to HAVE_CRYPTOHASH
+  * Tidy initialisation in hash_questions.c
+  * Optimise sort_rrset for the case where the RR type
+  * Move fd into frec_src 
+
 -------------------------------------------------------------------
 Wed Jan 27 16:24:43 UTC 2021 - Callum Farmer <gmbr3@opensuse.org>
 
diff --git a/dnsmasq.spec b/dnsmasq.spec
index 4c0d165..31f5d37 100644
--- a/dnsmasq.spec
+++ b/dnsmasq.spec
@@ -22,14 +22,14 @@
 %bcond_without tftp_user_package
 %endif
 Name:           dnsmasq
-Version:        2.83
+Version:        2.85
 Release:        0
 Summary:        DNS Forwarder and DHCP Server
 License:        GPL-2.0-only OR GPL-3.0-only
 Group:          Productivity/Networking/DNS/Servers
-URL:            http://www.thekelleys.org.uk/dnsmasq/
-Source0:        http://www.thekelleys.org.uk/%{name}/%{name}-%{version}.tar.xz
-Source1:        http://www.thekelleys.org.uk/%{name}/%{name}-%{version}.tar.xz.asc
+URL:            https://thekelleys.org.uk/dnsmasq/
+Source0:        https://thekelleys.org.uk/%{name}/%{name}-%{version}.tar.xz
+Source1:        https://thekelleys.org.uk/%{name}/%{name}-%{version}.tar.xz.asc
 Source2:        %{name}.keyring
 Source3:        dnsmasq.reg
 Source4:        dnsmasq.service