diff --git a/IO-Socket-SSL-2.064.tar.gz b/IO-Socket-SSL-2.064.tar.gz
deleted file mode 100644
index 3b90d7c..0000000
--- a/IO-Socket-SSL-2.064.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:5827c6459ed2dce1da0ba6f442d198fa2c81554e045930e32b92c6d39e3ac3f5
-size 243078
diff --git a/IO-Socket-SSL-2.065.tar.gz b/IO-Socket-SSL-2.065.tar.gz
new file mode 100644
index 0000000..f0fd7b4
--- /dev/null
+++ b/IO-Socket-SSL-2.065.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b5977c62709db19a26a336debd887aa131d39cd48a8d1495ef640457cea83dab
+size 244049
diff --git a/perl-IO-Socket-SSL.changes b/perl-IO-Socket-SSL.changes
index 78dacc8..c71b555 100644
--- a/perl-IO-Socket-SSL.changes
+++ b/perl-IO-Socket-SSL.changes
@@ -1,3 +1,17 @@
+-------------------------------------------------------------------
+Wed Mar  6 06:13:26 UTC 2019 - Stephan Kulow <coolo@suse.com>
+
+- updated to 2.065
+   see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
+
+  2.065
+  - make sure that Net::SSLeay::CTX_get0_param is defined before using
+    X509_V_FLAG_PARTIAL_CHAIN. Net::SSLeay 1.85 defined only the second with
+    LibreSSL 2.7.4 but not the first
+    https://rt.cpan.org/Ticket/Display.html?id=128716
+  - prefer AES for server side cipher default since it is usually
+    hardware-accelerated
+
 -------------------------------------------------------------------
 Tue Mar  5 11:52:51 UTC 2019 - Stephan Kulow <coolo@suse.com>
 
diff --git a/perl-IO-Socket-SSL.spec b/perl-IO-Socket-SSL.spec
index 1657248..6491001 100644
--- a/perl-IO-Socket-SSL.spec
+++ b/perl-IO-Socket-SSL.spec
@@ -17,14 +17,15 @@
 
 
 Name:           perl-IO-Socket-SSL
-Version:        2.064
+Version:        2.065
 Release:        0
 %define cpan_name IO-Socket-SSL
 Summary:        Nearly transparent SSL encapsulation for IO::Socket::INET
 License:        Artistic-1.0 OR GPL-1.0-or-later
 Group:          Development/Libraries/Perl
 Url:            https://metacpan.org/release/%{cpan_name}
-Source0:        https://cpan.metacpan.org/authors/id/S/SU/SULLR/%{cpan_name}-%{version}.tar.gz
+#Source0:        https://cpan.metacpan.org/authors/id/S/SU/SULLR/%{cpan_name}-2.063.tar.gz
+Source0:        IO-Socket-SSL-2.065.tar.gz
 Source1:        cpanspec.yml
 BuildArch:      noarch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build