diff --git a/nsd-4.1.22.tar.gz b/nsd-4.1.22.tar.gz
deleted file mode 100644
index 0977c0c..0000000
--- a/nsd-4.1.22.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:f186e86705768a35ecb6ac18d1ee4eeec2745fcd1feab38e64f89c5eb5aa049c
-size 1099463
diff --git a/nsd-4.1.22.tar.gz.asc b/nsd-4.1.22.tar.gz.asc
deleted file mode 100644
index 5ab311e..0000000
--- a/nsd-4.1.22.tar.gz.asc
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIcBAABAgAGBQJbHjJuAAoJEJ9vHC1+BF+NuHMP/RAy7kH/k2+k0WQMbSJnZzAw
-sm810TsurZAf6nhw+Mdf7vJkFx5rF499yukB3g+BQO3lRBHoVHEe1DqH5i6i7lnI
-01/H3xG2YP7lIhExsA4XAeFTtntCkMt3PIoSrATOdFSfShVXhKnTUtQhMbbfrpt4
-9+8UljFpXht+u2YPqzCg3lEwACW85APRtaTZtyqJeglv6LjFaxIqy6aEvDy1gCk2
-coVynmwGBqI3UNBFAdgHhcWRxqJEJwOiMmwDCUnsCGcMwW7vWwnMtvsBRi63m27f
-5N203qjQSQ9tglxx315H+tTV0AofHmUnlD8KF4pZPxXhCHH6EJ3RDFh2wpVrKsS8
-USf+cEhGe1JcI2szhVLPykDvh8IDf1gOMb1J8p3ZS3GdHywDbtXb+iJS0NwGzHBS
-gPfSllcCtocXAY8Wg0UoLG/Vo7SAgkXlsrqR+T32MxrQFrkYLYgeYzAeKC6RYpkn
-OdjLNBGyhN4wDoUPza5Q2N8MghtwjImNP9XHcZQcDoScf+a75jjXkM0igv3ZPGZm
-yM4Fn/s07kd9BLMOeOZhk/OuiAS05PApalYcat42DozqWJLQn1cDNG84X5D5Lh0t
-1t90hJj67v18xpBoA5J9vwSq9ySnFd75HJUoZv1uGDNJJ9lQLFBc7yr8st1fC4PN
-csxljbz12CivO2kF2zhV
-=KuCs
------END PGP SIGNATURE-----
diff --git a/nsd-4.1.23.tar.gz b/nsd-4.1.23.tar.gz
new file mode 100644
index 0000000..8785697
--- /dev/null
+++ b/nsd-4.1.23.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:f60ed8bd676b94a1c83c4335e8a51d61baa1a952660ecf21673a1414244b85fd
+size 1102038
diff --git a/nsd-4.1.23.tar.gz.asc b/nsd-4.1.23.tar.gz.asc
new file mode 100644
index 0000000..076d005
--- /dev/null
+++ b/nsd-4.1.23.tar.gz.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=Rzza
+-----END PGP SIGNATURE-----
diff --git a/nsd.changes b/nsd.changes
index 16a4125..c2d31c8 100644
--- a/nsd.changes
+++ b/nsd.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Mon Jul 30 18:47:44 UTC 2018 - michael@stroeder.com
+
+- Update to upstream release 4.1.23:
+  - Fix NSD time sensitive TSIG compare vulnerability.
+
 -------------------------------------------------------------------
 Tue Jul  3 10:34:07 UTC 2018 - michael@stroeder.com
 
diff --git a/nsd.spec b/nsd.spec
index 16a6f4e..3d249fe 100644
--- a/nsd.spec
+++ b/nsd.spec
@@ -23,7 +23,7 @@
 %define zonesdir   %{configdir}/zones
 %define pidfile    %{_rundir}/nsd/nsd.pid
 Name:           nsd
-Version:        4.1.22
+Version:        4.1.23
 Release:        0
 #
 Summary:        An authoritative-only domain name server