diff --git a/Werkzeug-2.0.1.tar.gz b/Werkzeug-2.0.1.tar.gz
deleted file mode 100644
index 43cff52..0000000
--- a/Werkzeug-2.0.1.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:1de1db30d010ff1af14a009224ec49ab2329ad2cde454c8a708130642d579c42
-size 892730
diff --git a/Werkzeug-2.0.2.tar.gz b/Werkzeug-2.0.2.tar.gz
new file mode 100644
index 0000000..08f5a6d
--- /dev/null
+++ b/Werkzeug-2.0.2.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:aa2bb6fc8dee8d6c504c0ac1e7f5f7dc5810a9903e793b6f715a9f015bdadb9a
+size 895061
diff --git a/python-Werkzeug.changes b/python-Werkzeug.changes
index bdcb764..2217141 100644
--- a/python-Werkzeug.changes
+++ b/python-Werkzeug.changes
@@ -1,3 +1,41 @@
+-------------------------------------------------------------------
+Sat Oct 16 21:20:36 UTC 2021 - Dirk Müller <dmueller@suse.com>
+
+- update to 2.0.2:
+  * Handle multiple tokens in ``Connection`` header when routing
+    WebSocket requests.
+  * Set the debugger pin cookie secure flag when on https.
+  * Fix type annotation for ``MultiDict.update`` to accept iterable
+    values :pr:`2142`
+  * Prevent double encoding of redirect URL when ``merge_slash=True``
+    for ``Rule.match``.
+  * ``CombinedMultiDict.to_dict`` with ``flat=False`` considers all
+    component dicts when building value lists. :issue:`2189`
+  * ``send_file`` only sets a detected ``Content-Encoding`` if
+    ``as_attachment`` is disabled to avoid browsers saving
+    decompressed ``.tar.gz`` files.
+  * Fix type annotations for ``TypeConversionDict.get`` to not return an
+    ``Optional`` value if both ``default`` and ``type`` are not
+    ``None``.
+  * Fix type annotation for routing rule factories to accept
+    ``Iterable[RuleFactory]`` instead of ``Iterable[Rule]`` for the
+    ``rules`` parameter. :issue:`2183`
+  * Add missing type annotation for ``FileStorage.__getattr__``
+  * The debugger pin cookie is set with ``SameSite`` set to ``Strict``
+    instead of ``None`` to be compatible with modern browser security.
+  * Type annotations use ``IO[bytes]`` and ``IO[str]`` instead of
+    ``BinaryIO`` and ``TextIO`` for wider type compatibility.
+  * Ad-hoc TLS certs are generated with SAN matching CN. :issue:`2158`
+  * Fix memory usage for locals when using Python 3.6 or pre 0.4.17
+    greenlet versions. :pr:`2212`
+  * Fix type annotation in ``CallbackDict``, because it is not
+    utilizing a bound TypeVar. :issue:`2235`
+  * Fix setting CSP header options on the response. :pr:`2237`
+  * Fix an issue with with the interactive debugger where lines would
+    not expand on click for very long tracebacks. :pr:`2239`
+  * The interactive debugger handles displaying an exception that does
+    not have a traceback, such as from ``ProcessPoolExecutor``.
+
 -------------------------------------------------------------------
 Sat Jun 19 07:42:14 UTC 2021 - Michael Ströder <michael@stroeder.com>
 
diff --git a/python-Werkzeug.spec b/python-Werkzeug.spec
index 0d2e814..cfdb6dd 100644
--- a/python-Werkzeug.spec
+++ b/python-Werkzeug.spec
@@ -19,7 +19,7 @@
 %{?!python_module:%define python_module() python-%{**} python3-%{**}}
 %define skip_python2 1
 Name:           python-Werkzeug
-Version:        2.0.1
+Version:        2.0.2
 Release:        0
 Summary:        The Swiss Army knife of Python web development
 License:        BSD-3-Clause