diff --git a/gnutls-2.8.5.tar.bz2 b/gnutls-2.8.5.tar.bz2
deleted file mode 100644
index 2d0de3a..0000000
--- a/gnutls-2.8.5.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:9249c29df71551e302e0186f4e1876dd6cc4c6cf2974b432c22525dde815cae8
-size 6196862
diff --git a/gnutls-2.8.6.tar.bz2 b/gnutls-2.8.6.tar.bz2
new file mode 100644
index 0000000..d7f7b8c
--- /dev/null
+++ b/gnutls-2.8.6.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d6f846a7064af3ee2c9aebd65dcee76953b767170cbcd719e990ed6b9688a356
+size 6469369
diff --git a/gnutls.changes b/gnutls.changes
index 138a7d5..83f88f3 100644
--- a/gnutls.changes
+++ b/gnutls.changes
@@ -1,3 +1,42 @@
+-------------------------------------------------------------------
+Sat Apr 24 11:38:17 UTC 2010 - coolo@novell.com
+
+- buildrequire pkg-config to fix provides
+
+-------------------------------------------------------------------
+Thu Apr 15 16:47:31 CEST 2010 - meissner@suse.de
+
+- updated to stable 2.8.6
+  ** libgnutls: For CSRs, don't null pad integers for RSA/DSA value.
+     VeriSign rejected CSRs with this padding.  
+
+     Note: As a side effect of this change, the "public key identifier"
+     value computed for a certificate using this version of GnuTLS will be
+     different from values computed using earlier versions of GnuTLS.
+
+  ** libgnutls: For CSRs on DSA keys, don't add DSA parameters to the
+     optional SignatureAlgorithm parameter field.
+     VeriSign rejected these CSRs.  They are stricly speaking not needed
+     since you need the signer's certificate to verify the certificate
+     signature anyway. 
+
+  ** libgnutls: When checking openpgp self signature also check the signatures
+     of all subkeys.
+     Ilari Liusvaara noticed and reported the issue and provided test
+     vectors as well.
+
+  ** libgnutls: Cleanups and several bug fixes.
+     Found by Steve Grubb and Tomas Mraz.
+
+  ** Link libgcrypt explicitly to certtool, gnutls-cli, gnutls-serv.
+
+  ** Fix --disable-valgrind-tests.
+
+  ** examples: Use the new APIs for printing X.509 certificate information.
+
+  ** i18n: Updated Czech, Dutch, French, Polish, Swedish and Vietnamese
+     translations.  Added Simplified Chinese translation.
+
 -------------------------------------------------------------------
 Tue Apr  6 19:15:22 UTC 2010 - crrodriguez@opensuse.org
 
diff --git a/gnutls.spec b/gnutls.spec
index 23fec6d..0dcf9ea 100644
--- a/gnutls.spec
+++ b/gnutls.spec
@@ -1,5 +1,5 @@
 #
-# spec file for package gnutls (Version 2.8.5)
+# spec file for package gnutls (Version 2.8.6)
 #
 # Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
@@ -19,9 +19,9 @@
 
 
 Name:           gnutls
-BuildRequires:  gcc-c++ libgcrypt-devel libopencdk-devel libtasn1-devel
-Version:        2.8.5
-Release:        2
+BuildRequires:  gcc-c++ libgcrypt-devel libopencdk-devel libtasn1-devel pkg-config
+Version:        2.8.6
+Release:        1
 License:        LGPLv2.1+
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 Url:            http://www.gnutls.org/
@@ -161,17 +161,13 @@ rm -f %{buildroot}%{_libdir}/*.{a,la}
 %clean
 rm -rf %buildroot
 
-%post -n libgnutls26
-/sbin/ldconfig
+%post -n libgnutls26 -p /sbin/ldconfig
 
-%postun -n libgnutls26
-/sbin/ldconfig
+%postun -n libgnutls26 -p /sbin/ldconfig
 
-%post -n libgnutls-extra26
-/sbin/ldconfig
+%post -n libgnutls-extra26 -p /sbin/ldconfig
 
-%postun -n libgnutls-extra26
-/sbin/ldconfig
+%postun -n libgnutls-extra26 -p /sbin/ldconfig
 
 %post -n libgnutls-devel
 %install_info --info-dir=%{_infodir} %{_infodir}/gnutls.info.gz