diff --git a/yaz-4.2.43.tar.bz2 b/yaz-4.2.43.tar.bz2
deleted file mode 100644
index f9fda2d..0000000
--- a/yaz-4.2.43.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:2c27e044b801170ab536be12cc52d28841c07bf1c3668268d5e1d13bb4b1b450
-size 1884808
diff --git a/yaz-4.2.47-implicit_definitions.patch b/yaz-4.2.47-implicit_definitions.patch
new file mode 100644
index 0000000..a28846e
--- /dev/null
+++ b/yaz-4.2.47-implicit_definitions.patch
@@ -0,0 +1,12 @@
+Index: yaz-4.2.47/src/sortspec.c
+===================================================================
+--- yaz-4.2.47.orig/src/sortspec.c
++++ yaz-4.2.47/src/sortspec.c
+@@ -13,6 +13,7 @@
+ #include <stdio.h>
+ #include <string.h>
+ #include <stdlib.h>
++#include <ctype.h>
+ #include <yaz/matchstr.h>
+ 
+ #include <yaz/z-core.h>
diff --git a/yaz-4.2.49.tar.bz2 b/yaz-4.2.49.tar.bz2
new file mode 100644
index 0000000..64f21ec
--- /dev/null
+++ b/yaz-4.2.49.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4ca185fe6775bd2219573fb25771cf6e011171978ade5c06ed3aa9bfd395eb8f
+size 1846711
diff --git a/yaz.changes b/yaz.changes
index ea14623..6fb06db 100644
--- a/yaz.changes
+++ b/yaz.changes
@@ -1,3 +1,32 @@
+-------------------------------------------------------------------
+Mon Jan 28 10:40:47 UTC 2013 - lars@linux-schulserver.de
+
+- update to 4.2.49:
+  + ICU has a new conversion element 'join', which joins tokens 
+    into one with a custom character given by the rule attribute.
+  + New GFS search member: present_number. This is a hint to the
+    search handler how many records are going to be fetched immediately
+    following search. There's no guarantee that it's going to be 
+    the case, since it depends on hit count (for Z39.50 piggyback) 
+    and whether errors turn up.
+  + Make a few functions static (private). The functions getbyte_stream,
+    ungetbyte_stream and yaz_gets are now private. They were never 
+    declared in a header file.
+  + ZOOM: special options to control APDU logging.
+    Using ZOOM_connection_option_set(c, "saveAPDU", "1") will enable
+    logging of APDUs until "saveAPDU" option is set again. If logging is
+    already enabled the effect is that current APDU buffer is cleared.
+    Using ZOOM_connection_option_set(c, "saveAPDU", "0") disables
+    logging (default behavior on new connection).
+    The APDUs sent/received can be obtained by using
+    Using ZOOM_connection_option_get(c, "APDU") or
+    ZOOM_connection_option_getl(c, "APDU", &l).
+  + GFS: relay implementation_version from backend
+    From 3.0.40 and later, implementation_version from backend was
+    not used in init response at all.
+- added yaz-4.2.47-implicit_definitions.patch
+- small specfile cleanup
+
 -------------------------------------------------------------------
 Mon Oct 22 15:10:25 UTC 2012 - ke@suse.de
 
diff --git a/yaz.spec b/yaz.spec
index 887cd59..bb41e07 100644
--- a/yaz.spec
+++ b/yaz.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package yaz
 #
-# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,24 +17,28 @@
 
 
 Name:           yaz
-Version:        4.2.43
+Version:        4.2.49
 Release:        0
-Summary:        Z39.50/SRW/SRU Programs
+Summary:        Z39.50 protocol server and client
 License:        BSD-3-Clause
 Group:          Development/Libraries/C and C++
 Url:            http://www.indexdata.dk/yaz/
-Source:         http://ftp.indexdata.dk/pub/yaz/%{name}-%{version}.tar.bz2
+Source:         %{name}-%{version}.tar.bz2
 Source2:        baselibs.conf
+# PATCH-FIX-UPSTREAM initialize variables properly
 Patch0:         yaz-4.1.7-codecleanup.diff
+# PATCH-FIX-UPSTREAM initialize variables properly
 Patch1:         yaz-4.1.7-client.diff
+# PATCH-FIX-UPSTREAM add needed ctype header 
+Patch2:         yaz-4.2.47-implicit_definitions.patch
 BuildRequires:  libicu-devel
 BuildRequires:  libpcap-devel
-BuildRequires:  libxml2-devel
 BuildRequires:  libxslt-devel
 BuildRequires:  openssl-devel
 BuildRequires:  pkg-config
 BuildRequires:  readline-devel
 BuildRequires:  tcpd-devel
+BuildRequires:  pkgconfig(libxml-2.0)
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 %define         libname libyaz4
 
@@ -58,10 +62,9 @@ using the ANSI/NISO Z39.50 protocol for Information Retrieval.
 This package contains the documentation.
 
 %package -n %{libname}
-
-Summary:        Z39.50 Library
+Summary:        Z39
 Group:          Development/Libraries/C and C++
-Provides:       libyaz = %{version}-%{release}
+Provides:       libyaz = %{version}
 Obsoletes:      libyaz < %{version}
 
 %description -n %{libname}
@@ -69,7 +72,7 @@ YAZ is a C library for developing client and server applications
 using the ANSI/NISO Z39.50 protocol for Information Retrieval.
 
 %package -n libyaz-devel
-Summary:        Z39.50 Library
+Summary:        Z39
 Group:          Development/Libraries/C and C++
 Requires:       %{libname} = %{version}
 Requires:       %{name} = %{version}
@@ -86,6 +89,7 @@ using the ANSI/NISO Z39.50 protocol for Information Retrieval.
 %setup -q
 %patch0 -p 1
 %patch1 -p 1
+%patch2 -p 1
 
 %build
 #  --with-dsssl=/usr/share/sgml/docbook/dsssl-stylesheets \