diff --git a/nsd-4.2.3.tar.gz b/nsd-4.2.3.tar.gz
deleted file mode 100644
index ec07e09..0000000
--- a/nsd-4.2.3.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:817d963b39d2af982f6a523f905cfd5b14a3707220a8da8f3013f34cdfe5c498
-size 1148054
diff --git a/nsd-4.2.3.tar.gz.asc b/nsd-4.2.3.tar.gz.asc
deleted file mode 100644
index e7ed60e..0000000
--- a/nsd-4.2.3.tar.gz.asc
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEE7fqj8spObrBWga+On28cLX4EX40FAl3U4qwACgkQn28cLX4E
-X426jg/8DPAD1nDOAABljHcc696uwmbbl6D5qsWZN9Vasjt4Y0ho3b9/52oZMytw
-z/dAi6c55YGU/C684AwkZdDB8ru+G5YfIzxqOQze7ZHxjWY4Cmnb1uVf0OElTYTi
-BT85kyERxcW6Q7d3DWivLjJnq8PoEYirJK0W7ZA3x1sh0jQXPKjQnLa5rMf2S26A
-6Ir+1NsuAxl840FIAa0/kVMPv4R1pjjidvvHQIX6r1U8C2QGv7LaAqnBo4Ey6Z/f
-n+L386BnYHWtiF+gFhNemysvJwOhK9qB/DxnmzJjCNfLurxFiw/+hfOAk+r22w8M
-1RZMR1mOm2fBuiqbmENO4oqfa3RxDGmGKx1raiPslU1NCD0dKhyKRb3ahS8gbB3Y
-TyGC11E/FG0ttVWVDme6bMm7jbHzwnt/ANUPF7A+XTgvMyZW7vXa3qS2gfiCMziP
-BgLW/IoiTn3wY7YYY4kW92p93xLbKo8lFKIaNU4ajFT7VihuKRTGJm6pziqpKX/V
-0IWcnF7sVy7hev4gcwM/zKsOhUOjE7BIx5r8NLOxOXD50CAPziGgrbHSGjpXexHh
-8AZZuA0oVP66xOW+4XvAusI3DxDiF5tFkgtI7HubqUzL2aI3BYymdEgy3ZbEcMi5
-otjaq/KCpITVDgVWMKaRpwbNdOi2P4U+lNfT8gK3W3yvJnGEouM=
-=4HO2
------END PGP SIGNATURE-----
diff --git a/nsd-4.2.4.tar.gz b/nsd-4.2.4.tar.gz
new file mode 100644
index 0000000..bfa8352
--- /dev/null
+++ b/nsd-4.2.4.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:9ebd6d766765631a56c0eb332eac26b310fa39f662e5582c8210488cf91ef27c
+size 1148826
diff --git a/nsd-4.2.4.tar.gz.asc b/nsd-4.2.4.tar.gz.asc
new file mode 100644
index 0000000..ee40fda
--- /dev/null
+++ b/nsd-4.2.4.tar.gz.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=6xb5
+-----END PGP SIGNATURE-----
diff --git a/nsd.changes b/nsd.changes
index 1b6370e..6859d11 100644
--- a/nsd.changes
+++ b/nsd.changes
@@ -1,3 +1,30 @@
+-------------------------------------------------------------------
+Thu Dec 12 15:50:13 UTC 2019 - Adam Majer <adam.majer@suse.de>
+
+- Update keyring as per https://nlnetlabs.nl/people/
+
+-------------------------------------------------------------------
+Tue Dec 10 19:39:57 UTC 2019 - Michael Ströder <michael@stroeder.com>
+
+- New upstream release 4.2.4
+
+FEATURES:
+- Fix #48: Add make distclean that removes config.h made by configure.
+  And add maintainer-clean that removes bison and flex output.
+
+BUG FIXES:
+- Detect fixed time memcmp for openssl 0.9.8 compatibility.
+- Detect EC_KEY_new_by_curve_name for openssl 0.9.8.
+- include limits.h for UINT_MAX.
+- If no recvmmsg, dont use msg_flags member, but errno for error,
+  where our fallback function left it, msg_flags also does not exist
+  on some systems.
+- Remove unused variable warning for portability.
+- Fix #52: do not log transient network full errors unless higher
+  verbosity is set.
+- Fix regressions in configparser.y where global variables were not
+  set for minimal-responses, round-robin and log-time-ascii.
+
 -------------------------------------------------------------------
 Wed Nov 20 13:33:09 UTC 2019 - Adam Majer <adam.majer@suse.de>
 
diff --git a/nsd.keyring b/nsd.keyring
index 953fdd9..916d936 100644
Binary files a/nsd.keyring and b/nsd.keyring differ
diff --git a/nsd.spec b/nsd.spec
index 2cbf909..a0a22dd 100644
--- a/nsd.spec
+++ b/nsd.spec
@@ -23,7 +23,7 @@
 %define zonesdir   %{configdir}/zones
 %define pidfile    %{_rundir}/nsd/nsd.pid
 Name:           nsd
-Version:        4.2.3
+Version:        4.2.4
 Release:        0
 #
 Summary:        An authoritative-only domain name server
@@ -34,6 +34,14 @@ Url:            http://open.nlnetlabs.nl/nsd/
 Source:         http://open.nlnetlabs.nl/downloads/nsd/nsd-%{version}.tar.gz
 Source1:        nsd.service
 Source2:        tmpfiles-nsd.conf
+# Generated with from https://nlnetlabs.nl/people/
+#
+# curl -Ss https://nlnetlabs.nl/people/ | \
+#   grep 'PGP Key ID' | \
+#   sed 's,.*PGP Key ID: \([A-Z0-9 ]\+\).*,\1,' | \
+#   perl -e 'while($_=<>){chop; s, ,,g;print; print(" ");}' | \
+#   xargs gpg --export-options export-minimal --export > nsd.keyring
+# 
 Source4:        nsd.keyring
 Source5:        https://www.nlnetlabs.nl/downloads/nsd/nsd-%{version}.tar.gz.asc
 Source10:       nsd-rpmlintrc