diff --git a/aiohttp-3.8.5.tar.gz b/aiohttp-3.8.5.tar.gz
deleted file mode 100644
index e3d1b9b..0000000
--- a/aiohttp-3.8.5.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:b9552ec52cc147dbf1944ac7ac98af7602e51ea2dcd076ed194ca3c0d1c7d0bc
-size 7358303
diff --git a/aiohttp-3.8.6.tar.gz b/aiohttp-3.8.6.tar.gz
new file mode 100644
index 0000000..5290245
--- /dev/null
+++ b/aiohttp-3.8.6.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b0cf2a4501bff9330a8a5248b4ce951851e415bdcce9dc158e76cfd55e15085c
+size 7352172
diff --git a/python-aiohttp.changes b/python-aiohttp.changes
index 5084cc0..7e6f6a3 100644
--- a/python-aiohttp.changes
+++ b/python-aiohttp.changes
@@ -1,3 +1,30 @@
+-------------------------------------------------------------------
+Tue Nov  7 11:52:54 UTC 2023 - Dirk Müller <dmueller@suse.com>
+
+- update to 3.8.6:
+  * Security bugfixes
+  * Upgraded the vendored copy of llhttp_ to v9.1.3
+  * https://github.com/aio-libs/aiohttp/security/advisories/GHSA-
+    pjjw-qhg8-p2p9.
+  * Updated Python parser to comply with RFCs 9110/9112
+  * https://github.com/aio-libs/aiohttp/security/advisories/GHSA-
+    gfw2-4jvh-wgfg.
+  * Added ``fallback_charset_resolver`` parameter in
+    ``ClientSession`` to allow a user-supplied
+    character set detection function.
+    Character set detection will no longer be included in 3.9 as
+    a default. If this feature is needed,
+    please use `fallback_charset_resolver
+  * Enabled lenient response parsing for more flexible parsing in
+    the client
+  * Fixed ``PermissionError`` when ``.netrc`` is unreadable due
+    to permissions.
+  * Fixed output of parsing errors
+  * Fixed ``GunicornWebWorker`` max_requests_jitter not working.
+  * Fixed sorting in ``filter_cookies`` to use cookie with
+    longest path.
+  * Fixed display of ``BadStatusLine`` messages from llhttp_.
+
 -------------------------------------------------------------------
 Sat Oct 14 17:27:26 UTC 2023 - Matej Cepl <mcepl@cepl.eu>
 
diff --git a/python-aiohttp.spec b/python-aiohttp.spec
index e3259be..25f2ea8 100644
--- a/python-aiohttp.spec
+++ b/python-aiohttp.spec
@@ -21,7 +21,7 @@
 %bcond_with docs
 %{?sle15_python_module_pythons}
 Name:           python-aiohttp
-Version:        3.8.5
+Version:        3.8.6
 Release:        0
 Summary:        Asynchronous HTTP client/server framework
 License:        Apache-2.0