diff --git a/.gitignore b/.gitignore
index 2a56253..57eee84 100644
--- a/.gitignore
+++ b/.gitignore
@@ -7,3 +7,4 @@
 /mbedtls-2.2.1-apache.tgz
 /mbedtls-2.3.0-apache.tgz
 /mbedtls-2.4.0-apache.tgz
+/mbedtls-2.4.2-apache.tgz
diff --git a/mbedtls.spec b/mbedtls.spec
index f166942..7939bff 100644
--- a/mbedtls.spec
+++ b/mbedtls.spec
@@ -3,7 +3,7 @@
 %endif
 
 Name: mbedtls
-Version: 2.4.0
+Version: 2.4.2
 Release: 1%{?dist}
 Summary: Light-weight cryptographic and SSL/TLS library
 Group: System Environment/Libraries
@@ -120,6 +120,9 @@ LD_LIBRARY_PATH=$PWD/library ctest --output-on-failure -V
 %doc apidoc/*
 
 %changelog
+* Sat Mar 11 2017 Morten Stevens <mstevens@fedoraproject.org> - 2.4.2-1
+- Update to 2.4.2
+
 * Mon Oct 31 2016 Morten Stevens <mstevens@fedoraproject.org> - 2.4.0-1
 - Update to 2.4.0
 
diff --git a/sources b/sources
index 362537d..93742c5 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-4debf0e0eed7e75a00b7780830c9688e  mbedtls-2.4.0-apache.tgz
+SHA512 (mbedtls-2.4.2-apache.tgz) = 75b704c9ea913828e4c56811e6255bdfc4c5ef5b5c44f28278521d2e209e57775507b54aef2a2e2a8c28d32f2ad474f65fdd40b079e0e9ee36d6f27a3c35bbd1