diff --git a/.gitignore b/.gitignore
index 14563bf..59a8a18 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/v2.28.4.tar.gz
+SOURCES/mbedtls-2.28.5.tar.gz
diff --git a/.mbedtls.metadata b/.mbedtls.metadata
index 4f20bb3..2eee7f1 100644
--- a/.mbedtls.metadata
+++ b/.mbedtls.metadata
@@ -1 +1 @@
-5a6aba3a4242a37d9defe2d43665245974ba6389  SOURCES/v2.28.4.tar.gz
+9c48048ca3ede2fd232f10d0de1b16a9f6764739  SOURCES/mbedtls-2.28.5.tar.gz
diff --git a/SPECS/mbedtls.spec b/SPECS/mbedtls.spec
index 70579b5..ab06a43 100644
--- a/SPECS/mbedtls.spec
+++ b/SPECS/mbedtls.spec
@@ -3,12 +3,12 @@
 %endif
 
 Name: mbedtls
-Version: 2.28.4
+Version: 2.28.5
 Release: 1%{?dist}
 Summary: Light-weight cryptographic and SSL/TLS library
 License: Apache-2.0
 URL: https://www.trustedfirmware.org/projects/mbed-tls
-Source0: https://github.com/Mbed-TLS/%{name}/archive/refs/tags/v%{version}.tar.gz
+Source0: https://github.com/Mbed-TLS/%{name}/archive/refs/tags/%{name}-%{version}.tar.gz
 
 BuildRequires: make
 BuildRequires: gcc-c++
@@ -43,7 +43,7 @@ BuildArch:      noarch
 The %{name}-doc package contains documentation.
 
 %prep
-%autosetup
+%autosetup -n mbedtls-mbedtls-2.28.5
 
 sed -i 's|//\(#define MBEDTLS_HAVEGE_C\)|\1|' include/mbedtls/config.h
 sed -i 's|//\(#define MBEDTLS_THREADING_C\)|\1|' include/mbedtls/config.h
@@ -94,6 +94,9 @@ chmod 755 %{buildroot}%{_libdir}/*.so.*
 %doc apidoc/*
 
 %changelog
+* Tue Oct 10 2023 Morten Stevens <mstevens@fedoraproject.org> - 2.28.5-1
+- Update to 2.28.5
+
 * Tue Aug 08 2023 Morten Stevens <mstevens@fedoraproject.org> - 2.28.4-1
 - Update to 2.28.4