diff --git a/.gitignore b/.gitignore
index faa5049..97708a7 100644
--- a/.gitignore
+++ b/.gitignore
@@ -35,3 +35,4 @@
 /v2.28.2.tar.gz
 /v2.28.3.tar.gz
 /v2.28.4.tar.gz
+/mbedtls-2.28.5.tar.gz
diff --git a/mbedtls.spec b/mbedtls.spec
index 8c2a211..a867d57 100644
--- a/mbedtls.spec
+++ b/mbedtls.spec
@@ -3,12 +3,12 @@
 %endif
 
 Name: mbedtls
-Version: 2.28.4
+Version: 2.28.5
 Release: 1%{?dist}
 Summary: Light-weight cryptographic and SSL/TLS library
 License: Apache-2.0
 URL: https://www.trustedfirmware.org/projects/mbed-tls
-Source0: https://github.com/Mbed-TLS/%{name}/archive/refs/tags/v%{version}.tar.gz
+Source0: https://github.com/Mbed-TLS/%{name}/archive/refs/tags/%{name}-%{version}.tar.gz
 
 BuildRequires: make
 BuildRequires: gcc-c++
@@ -43,7 +43,7 @@ BuildArch:      noarch
 The %{name}-doc package contains documentation.
 
 %prep
-%autosetup
+%autosetup -n mbedtls-mbedtls-2.28.5
 
 sed -i 's|//\(#define MBEDTLS_HAVEGE_C\)|\1|' include/mbedtls/config.h
 sed -i 's|//\(#define MBEDTLS_THREADING_C\)|\1|' include/mbedtls/config.h
@@ -94,6 +94,9 @@ chmod 755 %{buildroot}%{_libdir}/*.so.*
 %doc apidoc/*
 
 %changelog
+* Tue Oct 10 2023 Morten Stevens <mstevens@fedoraproject.org> - 2.28.5-1
+- Update to 2.28.5
+
 * Tue Aug 08 2023 Morten Stevens <mstevens@fedoraproject.org> - 2.28.4-1
 - Update to 2.28.4
 
diff --git a/sources b/sources
index 330bbdc..15e7d89 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (v2.28.4.tar.gz) = 15eaf58199af10c7ece0a6073bb01a086704e0651551a6106714a0b7e59dc60d5a9e2416fb00d12b8bca7a0c14ad28fc05148eaefd73c4d6c2a0f871c0637405
+SHA512 (mbedtls-2.28.5.tar.gz) = 339911d244b4e6e4d77b344c796f018d9ad4c56249530b8a56e0dc305ddf30bc709dca96a19c5a06710e92d167ef22893e9e17e20837e9daee0d0be00a8ccae9