diff --git a/_service b/_service
index 63b0d0d..de47b09 100644
--- a/_service
+++ b/_service
@@ -5,7 +5,7 @@
     <param name="exclude">.git</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="versionrewrite-pattern">v(.*)</param>
-    <param name="revision">v8.5.15</param>
+    <param name="revision">v8.5.20</param>
     <param name="changesgenerate">enable</param>
   </service>
   <service name="recompress" mode="disabled">
diff --git a/_servicedata b/_servicedata
index 8f07a9f..6ca5744 100644
--- a/_servicedata
+++ b/_servicedata
@@ -1,6 +1,6 @@
 <servicedata>
   <service name="tar_scm">
     <param name="url">https://github.com/grafana/grafana</param>
-    <param name="changesrevision">be4228db5a43f65a989239f891185d45912d39ad</param>
+    <param name="changesrevision">e927a6459fd6c493628fa2cf5ba494c01427bca2</param>
   </service>
 </servicedata>
\ No newline at end of file
diff --git a/grafana-8.5.15.tar.gz b/grafana-8.5.15.tar.gz
deleted file mode 100644
index 665622f..0000000
--- a/grafana-8.5.15.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:fcdcdbb5021344ee8f21decd8cfaac7c23928385fe0f7d550cb795ceab5cead1
-size 51544910
diff --git a/grafana-8.5.20.tar.gz b/grafana-8.5.20.tar.gz
new file mode 100644
index 0000000..46264b8
--- /dev/null
+++ b/grafana-8.5.20.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5250d3fa4a312d88dd1f5e2554043f70e403e6adaee92ecc40307d7f9ecf9243
+size 51575837
diff --git a/grafana.changes b/grafana.changes
index 65e4080..d2d07a0 100644
--- a/grafana.changes
+++ b/grafana.changes
@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Mon Feb 06 09:12:33 UTC 2023 - witold.bedyk@suse.com
+
+- Update to version 8.5.20:
+  * Security: SVG: Add dompurify preprocessor step
+    (bsc#1207749, CVE-2022-23552)
+  * Security: Snapshots: Fix originalUrl spoof security issue
+    (bsc#1207750, CVE-2022-39324)
+  * Security: Omit error from http response 
+  * Bug fix: Email and username trimming and invitation validation
+
 -------------------------------------------------------------------
 Fri Nov 18 10:52:52 UTC 2022 - witold.bedyk@suse.com
 
diff --git a/grafana.spec b/grafana.spec
index 738de84..e2b3a56 100644
--- a/grafana.spec
+++ b/grafana.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package grafana
 #
-# Copyright (c) 2022 SUSE LLC
+# Copyright (c) 2023 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -22,7 +22,7 @@
 %endif
 
 Name:           grafana
-Version:        8.5.15
+Version:        8.5.20
 Release:        0
 Summary:        The open-source platform for monitoring and observability
 License:        AGPL-3.0-only
diff --git a/vendor.tar.gz b/vendor.tar.gz
index d4f8444..abfa9a4 100644
--- a/vendor.tar.gz
+++ b/vendor.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:2c2877e029bff95ab8f00142f38a53f40d197ebc1e711747a70fc1af3f7d9a78
-size 19588389
+oid sha256:e1085edc2bb688d98424321e77970b4beaa211a54a4242b04765df7f10c5c30e
+size 19677383