diff --git a/python-urllib3.changes b/python-urllib3.changes
index ef8db9d..b73c459 100644
--- a/python-urllib3.changes
+++ b/python-urllib3.changes
@@ -1,3 +1,16 @@
+-------------------------------------------------------------------
+Thu Oct  5 15:47:36 UTC 2023 - Daniel Garcia <daniel.garcia@suse.com>
+
+- update to 2.0.6 (bsc#1215968, CVE-2023-43804):
+  * Added the Cookie header to the list of headers to strip from
+    requests when redirecting to a different host. As before, different
+    headers can be set via Retry.remove_headers_on_redirect
+- 2.0.5:
+  * Allowed pyOpenSSL third-party module without any deprecation
+    warning. #3126
+  * Fixed default blocksize of HTTPConnection classes to match
+    high-level classes. Previously was 8KiB, now 16KiB. #3066
+
 -------------------------------------------------------------------
 Tue Jul 25 18:33:23 UTC 2023 - Dirk Müller <dmueller@suse.com>
 
diff --git a/python-urllib3.spec b/python-urllib3.spec
index 5327540..59ecc68 100644
--- a/python-urllib3.spec
+++ b/python-urllib3.spec
@@ -26,7 +26,7 @@
 %endif
 %{?sle15_python_module_pythons}
 Name:           python-urllib3%{psuffix}
-Version:        2.0.4
+Version:        2.0.6
 Release:        0
 Summary:        HTTP library with thread-safe connection pooling, file post, and more
 License:        MIT
diff --git a/urllib3-2.0.4.tar.gz b/urllib3-2.0.4.tar.gz
deleted file mode 100644
index 240b0a9..0000000
--- a/urllib3-2.0.4.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:8d22f86aae8ef5e410d4f539fde9ce6b2113a001bb4d189e0aed70642d602b11
-size 281517
diff --git a/urllib3-2.0.6.tar.gz b/urllib3-2.0.6.tar.gz
new file mode 100644
index 0000000..aafdf35
--- /dev/null
+++ b/urllib3-2.0.6.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b19e1a85d206b56d7df1d5e683df4a7725252a964e3993648dd0fb5a1c157564
+size 281846