diff --git a/dnsmasq-2.87.tar.xz b/dnsmasq-2.87.tar.xz
deleted file mode 100644
index 6fcd01e..0000000
--- a/dnsmasq-2.87.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:0228c0364a7f2356fd7e7f1549937cbf3099a78d3b2eb1ba5bb0c31e2b89de7a
-size 540528
diff --git a/dnsmasq-2.87.tar.xz.asc b/dnsmasq-2.87.tar.xz.asc
deleted file mode 100644
index 62d88f3..0000000
--- a/dnsmasq-2.87.tar.xz.asc
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEE1urL1u5GuDQkjRESFc3aauGRNaIFAmMwyhgACgkQFc3aauGR
-NaILSQ/+Kp/68XUjc6i5fArQOT3vfsbHWxPfyIm44sij50iJMMmuKFArJE7IRRTw
-XJFu8ILIVKwLwFgGbQqcNlcL8gtQweKQioe/WPacvX6TeIVGZ2+SBBO69A6gDtUy
-FmP47IgskXNlfQIJxUDgtC6khWNad0jTcb/tSVePDDuuUkHIcVZ8esEo7ZFRGitI
-Uf+Kwjn81lwiaRHyCo26GRfUIrMEcLmaawKaeGsb09PCyRDK74vXGhkqcd49qMeF
-xU4zOn9jqUrCvFKa4Vq6m9SJbnp+U3c10ETTUWDDm7sh4YN1XvM0B8MkRDlB8jlZ
-f9YrdydTVXK4U21/YbQNJvyHCED7kB1T8xLRwomxZ9dhAL6Sna9NCGWIwosdzzgo
-8fsYNhWammcxkok+5cL4GlBDIBua8VEtJARxvyQFgD1w2lgxMC1xcX8vT+9O1hWS
-hwcld7mGD0sbnBuRYOFiV6vEk4UtvRIM+/JBnRJhDSSFL3+3Bw8BSjDgs293JPYT
-/lX9/JyMfdz6L9VsJm8YtwtGcmwqQKdLpJDS104PE1S6GciF5ubvqpz1Go6JLoNA
-vQGLs8CG2wlH1PJwFpCDQfOeBknPcvpB9PjbEWudQ+S3MJ/rA0J021OwIyfZ1QYZ
-mxjUWmvXSDEPhkAnNnXtnOTbrmAbWxEqvgC1KHAxZWkk3HPyY1Y=
-=w6LM
------END PGP SIGNATURE-----
diff --git a/dnsmasq-2.88.tar.xz b/dnsmasq-2.88.tar.xz
new file mode 100644
index 0000000..8257c0c
--- /dev/null
+++ b/dnsmasq-2.88.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:23544deda10340c053bea6f15a93fed6ea7f5aaa85316bfc671ffa6d22fbc1b3
+size 560640
diff --git a/dnsmasq-2.88.tar.xz.asc b/dnsmasq-2.88.tar.xz.asc
new file mode 100644
index 0000000..6164baa
--- /dev/null
+++ b/dnsmasq-2.88.tar.xz.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=tFGf
+-----END PGP SIGNATURE-----
diff --git a/dnsmasq.changes b/dnsmasq.changes
index c2ce186..6a9550f 100644
--- a/dnsmasq.changes
+++ b/dnsmasq.changes
@@ -1,3 +1,19 @@
+-------------------------------------------------------------------
+Fri Dec 23 07:48:29 UTC 2022 - Dirk Müller <dmueller@suse.com>
+
+- update to 2.88:
+  * Fix bug in --dynamic-host when an interface has /16 IPv4
+  * address.
+  * Add --fast-dns-retry option. This gives dnsmasq the ability
+    to originate retries for upstream DNS queries itself, rather
+    than relying on the downstream client. This is most useful
+    when doing DNSSEC over unreliable upstream networks. It comes
+    with some cost in memory usage and network bandwidth.
+  * Add --use-stale-cache option. When set, if a DNS name exists
+    in the cache, but its time-to-live has expired, dnsmasq will
+    return the data anyway.
+  * handle removal of whole files or entries within files.
+
 -------------------------------------------------------------------
 Wed Oct 26 09:21:37 UTC 2022 - Dirk Müller <dmueller@suse.com>
 
diff --git a/dnsmasq.spec b/dnsmasq.spec
index 3251914..998d41f 100644
--- a/dnsmasq.spec
+++ b/dnsmasq.spec
@@ -22,7 +22,7 @@
 %bcond_with tftp_user_package
 %endif
 Name:           dnsmasq
-Version:        2.87
+Version:        2.88
 Release:        0
 Summary:        DNS Forwarder and DHCP Server
 License:        GPL-2.0-only OR GPL-3.0-only