diff --git a/nghttp2-1.41.0.tar.xz b/nghttp2-1.41.0.tar.xz
deleted file mode 100644
index dd6e110..0000000
--- a/nghttp2-1.41.0.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:abc25b8dc601f5b3fefe084ce50fcbdc63e3385621bee0cbfa7b57f9ec3e67c2
-size 1640712
diff --git a/nghttp2-1.42.0.tar.xz b/nghttp2-1.42.0.tar.xz
new file mode 100644
index 0000000..eec8b7c
--- /dev/null
+++ b/nghttp2-1.42.0.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c5a7f09020f31247d0d1609078a75efadeccb7e5b86fc2e4389189b1b431fe63
+size 3973284
diff --git a/nghttp2.changes b/nghttp2.changes
index 3403513..c13aaa4 100644
--- a/nghttp2.changes
+++ b/nghttp2.changes
@@ -1,3 +1,21 @@
+-------------------------------------------------------------------
+Wed Jan  6 12:22:21 UTC 2021 - Dirk Müller <dmueller@suse.com>
+
+- update to 1.42.0:
+  * lib: fix ubsan errors (Patch from Asra Ali) (GH-1468)
+  * lib: Don't send RST_STREAM to idle stream (GH-1477)
+  * lib: nghttp2_map backed by nghttp2_ksl
+  * doc: Update sphinx_rtd_theme
+  * doc: nghttp2_session_send is also affected by max concurrent streams (Patch from Tomas Krizek) (GH-1489)
+  * doc: clarify flow control behaviour for nghttp2_session_send() (Patch from Tomas Krizek) (GH-1488)
+  * build: Add missing cmake/FindSystemd.cmake to dist (GH-1526)
+  * third-party: Bump llhttp to 2.2.0
+  * third-party: Bump mruby to 2.1.2
+  * nghttpx: Deal with the case when h2 backend is retired before it is initialized
+  * nghttpx: Add accesslog variables to record request path without query (GH-1511)
+  * nghttpx: Fix stall when TLS follows after proxy protocol
+  * nghttpx: Fix logging integer 
+
 -------------------------------------------------------------------
 Wed Jun  3 11:45:25 UTC 2020 - Paolo Stivanin <info@paolostivanin.com>
 
diff --git a/nghttp2.spec b/nghttp2.spec
index 47c547c..d49b4c5 100644
--- a/nghttp2.spec
+++ b/nghttp2.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package nghttp2
 #
-# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2021 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -29,7 +29,7 @@
 %bcond_with python
 %endif
 Name:           nghttp2%{psuffix}
-Version:        1.41.0
+Version:        1.42.0
 Release:        0
 Summary:        Implementation of Hypertext Transfer Protocol version 2 in C
 License:        MIT
@@ -55,9 +55,9 @@ BuildRequires:  pkgconfig(libxml-2.0)
 BuildRequires:  pkgconfig(openssl)
 BuildRequires:  pkgconfig(zlib)
 %if %{with python}
-BuildRequires:  pkgconfig(python3)
 BuildRequires:  python3-Cython
 BuildRequires:  python3-setuptools
+BuildRequires:  pkgconfig(python3)
 %endif
 %ifnarch ppc %{arm}
 %if 0%{?sle_version} >= 150000 && 0%{?is_opensuse}