diff --git a/gnutls-3.2.18.tar.xz b/gnutls-3.2.18.tar.xz
deleted file mode 100644
index 8674ff5..0000000
--- a/gnutls-3.2.18.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:4762afab5e1b9e829c5f53d2b00cd5e41d43fa6d035efcf239e3fe0459134d45
-size 5154476
diff --git a/gnutls-3.2.18.tar.xz.sig b/gnutls-3.2.18.tar.xz.sig
deleted file mode 100644
index 76d1803..0000000
Binary files a/gnutls-3.2.18.tar.xz.sig and /dev/null differ
diff --git a/gnutls-3.2.20.tar.xz b/gnutls-3.2.20.tar.xz
new file mode 100644
index 0000000..d52a0a2
--- /dev/null
+++ b/gnutls-3.2.20.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:7967057e78c3ed968e524a07ab262681219b73001ab8e75cbc4f1a506abdb598
+size 5160184
diff --git a/gnutls-3.2.20.tar.xz.sig b/gnutls-3.2.20.tar.xz.sig
new file mode 100644
index 0000000..8133d76
Binary files /dev/null and b/gnutls-3.2.20.tar.xz.sig differ
diff --git a/gnutls.changes b/gnutls.changes
index 4c29d42..894ae09 100644
--- a/gnutls.changes
+++ b/gnutls.changes
@@ -1,3 +1,27 @@
+-------------------------------------------------------------------
+Wed Nov 12 10:59:02 UTC 2014 - meissner@suse.com
+
+- Updated to 3.2.20 (released 2014-11-10)
+
+  ** libgnutls: Removed superfluous random generator refresh on every
+     call of gnutls_deinit(). That reduces load and usage of /dev/urandom.
+  ** libgnutls: Corrected issue in export of ECC parameters to X9.63
+     format.  Reported by Sean Burford [GNUTLS-SA-2014-5].
+  (CVE-2014-8564 bnc#904603)
+
+- Updated to 3.2.19 (released 2014-10-13)
+  ** libgnutls: Fixes in the transparent import of PKCS #11 certificates.
+     Reported by Joseph Peruski.
+  ** libgnutls: Fixed issue with unexpected non-fatal errors resetting the
+     handshake's hash buffer, in applications using the heartbeat extension
+     or DTLS. Reported by Joeri de Ruiter.
+  ** libgnutls: fix issue in DTLS retransmission when session tickets were
+     in use; reported by Manuel Pégourié-Gonnard.
+  ** libgnutls: Prevent abort() in library if getrusage() fails. Try to
+     detect instead which of RUSAGE_THREAD and RUSAGE_SELF would work.
+  ** guile: new 'set-session-server-name!' procedure; see the manual
+     for details.
+
 -------------------------------------------------------------------
 Wed Sep 24 14:52:54 UTC 2014 - citypw@gmail.com
 
diff --git a/gnutls.spec b/gnutls.spec
index f62889b..91e44ca 100644
--- a/gnutls.spec
+++ b/gnutls.spec
@@ -21,7 +21,7 @@
 %define gnutls_ossl_sover 27
 
 Name:           gnutls
-Version:        3.2.18
+Version:        3.2.20
 Release:        0
 Summary:        The GNU Transport Layer Security Library
 License:        LGPL-2.1+ and GPL-3.0+
@@ -150,7 +150,7 @@ autoreconf -if
         --disable-silent-rules \
 	--with-default-trust-store-dir=/var/lib/ca-certificates/pem \
         --with-sysroot=/%{?_sysroot}
-%__make %{?_smp_mflags}
+%__make
 
 %install
 %make_install