diff --git a/libzrtpcpp-4.1.0.tar.xz b/libzrtpcpp-4.1.0.tar.xz
deleted file mode 100644
index 7702a28..0000000
--- a/libzrtpcpp-4.1.0.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:0ab8eaac6a5a53948144eb48bd41167cb6c2d3885a60b8c325a3d98177d6171a
-size 1277856
diff --git a/libzrtpcpp-4.2.4.tar.xz b/libzrtpcpp-4.2.4.tar.xz
new file mode 100644
index 0000000..28ec15c
--- /dev/null
+++ b/libzrtpcpp-4.2.4.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:21d382964f3070a148a3ec5f556295854525f7b34e70028d3512897a47b5b146
+size 1279984
diff --git a/libzrtpcpp.changes b/libzrtpcpp.changes
index a310df2..5be9a6b 100644
--- a/libzrtpcpp.changes
+++ b/libzrtpcpp.changes
@@ -1,3 +1,19 @@
+-------------------------------------------------------------------
+Sat Sep  6 18:30:47 UTC 2014 - jengelh@inai.de
+
+- Update to new upstream release 4.2.4
+* Rename functions aes_init() to aes_init_zrtp() to avoid names
+  clashes with other libreries that may include own AES modules.
+
+-------------------------------------------------------------------
+Sat Jun 28 01:41:37 UTC 2014 - jengelh@inai.de
+
+- Update to new upstream release 4.2.3
+* Enhance SRTP handling to provide a longer bit-shift register
+* Add functions to read ZID cache entries, raw data, formatted
+  as string
+* Order full ZID list by secure-since date
+
 -------------------------------------------------------------------
 Sun Nov 24 13:16:43 UTC 2013 - jengelh@inai.de
 
diff --git a/libzrtpcpp.spec b/libzrtpcpp.spec
index b5f8a02..72c90b9 100644
--- a/libzrtpcpp.spec
+++ b/libzrtpcpp.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package libzrtpcpp
 #
-# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,31 +18,25 @@
 
 Name:           libzrtpcpp
 %define lname	libzrtpcpp4
-Version:        4.1.0
+Version:        4.2.4
 Release:        0
 Summary:        A ccrtp extension for ZRTP support
 License:        GPL-3.0+
 Group:          Development/Libraries/C and C++
 Url:            http://www.gnutelephony.org/index.php/GNU_ZRTP
 
-#Freecode-URL:	http://freecode.com/projects/libzrtpcpp
 #Git-Clone:	git://github.com/wernerd/ZRTPCPP
-#Snapshot:	V4.1.0
+#Snapshot:	V4.2.4
 # No longer produces release tarballs since 3.x.
 Source:         %name-%version.tar.xz
+Source2:        %name.keyring
 BuildRequires:  cmake
 BuildRequires:  gcc-c++
 BuildRequires:  pkgconfig
 BuildRequires:  xz
-%if 0%{?suse_version} >= 1130
 BuildRequires:  pkgconfig(libccrtp) >= 2
 BuildRequires:  pkgconfig(libcrypto) >= 0.9.8
 BuildRequires:  pkgconfig(sqlite3) >= 3.7
-%else
-BuildRequires:  ccrtp-devel >= 2
-BuildRequires:  libopenssl-devel >= 0.9.8
-BuildRequires:  sqlite3-devel >= 3.7
-%endif
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 
 %description
@@ -78,16 +72,21 @@ documentation for building applications that use libzrtpcpp.
 mkdir build
 cd build
 
+# libzrtpcpp changed its API (apparently - can't tell whether aes_init
+# was meant to be exported or not), but failed to bump the SO version.
+# So now, add explicit symbol versions to ensure programs with wrong
+# ABI combinations are caught.
+echo "V_%version { global: *; };" >version.map
 cmake -DCMAKE_INSTALL_PREFIX=%{_prefix} \
       -DCMAKE_C_FLAGS:STRING="%{optflags}" \
       -DCMAKE_CXX_FLAGS:STRING="%{optflags}" \
+      -DCMAKE_LD_FLAGS:STRING="-Wl,--version-script=$PWD/version.map" \
       -DCRYPTO_STANDALONE:BOOL=false \
 %if "%{_lib}" == "lib64"
       -DLIB_SUFFIX=64 \
 %endif
       ..
 
-#perl -i -pe 's{@zrtplib@}{-lzrtpcpp}g' *.pc.cmake
 make %{?_smp_mflags} VERBOSE=1
 
 %install