diff --git a/_service b/_service
index 03ca767..47eaca0 100644
--- a/_service
+++ b/_service
@@ -2,7 +2,7 @@
   <service name="tar_scm" mode="disabled">
     <param name="url">https://github.com/intel/tpm2-abrmd.git</param>
     <param name="scm">git</param>
-    <param name="revision">2.3.0</param>
+    <param name="revision">2.3.3</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="changesgenerate">disable</param>
   </service>
diff --git a/tpm2-abrmd-2.3.0.tar.gz b/tpm2-abrmd-2.3.0.tar.gz
deleted file mode 100644
index a1db2e3..0000000
--- a/tpm2-abrmd-2.3.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:63cb59be1fd21e6ae233c37a0aa4a59883a4885a7bfd2c7e69979c5048518d50
-size 567803
diff --git a/tpm2-abrmd-2.3.3.tar.gz b/tpm2-abrmd-2.3.3.tar.gz
new file mode 100644
index 0000000..ef98fee
--- /dev/null
+++ b/tpm2-abrmd-2.3.3.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:1e587808c6739079d59f124d9c1a0058f8d34dd84f1f656c946667fa0a181c48
+size 573449
diff --git a/tpm2.0-abrmd.changes b/tpm2.0-abrmd.changes
index a81de5a..7ea5ef0 100644
--- a/tpm2.0-abrmd.changes
+++ b/tpm2.0-abrmd.changes
@@ -1,3 +1,23 @@
+-------------------------------------------------------------------
+Thu Oct 22 12:15:24 UTC 2020 - Matthias Gerstner <matthias.gerstner@suse.com>
+
+- update to version 2.3.3:
+  - changes in version 2.3.1:
+    - Fixed handle resource leak exhausting TPM resources.
+  - changes in version 2.3.2:
+    - Added cirrus CI specific config files to enable FreeBSD builds.
+    - Changed test scripts to be more portable.
+    - Changed include header paths specific to FreeBSD.
+  - changes in version 2.3.1:
+    - Provide meaningful exit codes on initialization failures.
+    - Prevent systemd from starting the daemon before udev changes ownership
+      of the TPM device node.
+    - Prevent systemd from starting the daemon if there is no TPM device node.
+    - Prevent systemd from restarting the daemon if it fails.
+    - Add SELinux policy to allow daemon to resolve names.
+    - Add SELinux policy boolean (disabled by default) to allow daemon to
+      connect to all unreserved ports.
+
 -------------------------------------------------------------------
 Wed Dec 11 11:55:13 UTC 2019 - matthias.gerstner@suse.com
 
diff --git a/tpm2.0-abrmd.spec b/tpm2.0-abrmd.spec
index b4248d9..9393b69 100644
--- a/tpm2.0-abrmd.spec
+++ b/tpm2.0-abrmd.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package tpm2.0-abrmd
 #
-# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2020 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,12 +17,12 @@
 
 
 Name:           tpm2.0-abrmd
-Version:        2.3.0
+Version:        2.3.3
 Release:        0
 Summary:        Intel's TCG Software Stack Access Broker & Resource Manager for TPM 2.0 chips
 License:        BSD-2-Clause
 Group:          Productivity/Security
-Url:            https://github.com/tpm2-software/tpm2-abrmd
+URL:            https://github.com/tpm2-software/tpm2-abrmd
 Source0:        https://github.com/tpm2-software/tpm2-abrmd/releases/download/%{version}/tpm2-abrmd-%{version}.tar.gz
 Source1:        tpm2.0-abrmd.rpmlintrc
 BuildRequires:  autoconf-archive