diff --git a/.gitignore b/.gitignore
index 95b7e9d..c070f11 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,4 @@
 /LuaJIT-2.0.2.tar.gz
 /LuaJIT-2.0.3.tar.gz
 /LuaJIT-2.0.4.tar.gz
+/LuaJIT-46e62cd.tar.gz
diff --git a/luajit.spec b/luajit.spec
index ab6732a..adf7ba2 100644
--- a/luajit.spec
+++ b/luajit.spec
@@ -1,10 +1,13 @@
+%global commit      46e62cd963a426e83a60f691dcbbeb742c7b3ba2
+%global shortcommit %(c=%{commit}; echo ${c:0:7})
+
 Name:           luajit
-Version:        2.0.4
-Release:        3%{?dist}
+Version:        2.0.5
+Release:        1.20220913.%{shortcommit}%{?dist}
 Summary:        Just-In-Time Compiler for Lua
 License:        MIT
-URL:            http://luajit.org/
-Source0:        http://luajit.org/download/LuaJIT-%{version}.tar.gz
+URL:            https://luajit.org
+Source0:        https://github.com/LuaJIT/LuaJIT/archive/%{commit}/LuaJIT-%{shortcommit}.tar.gz
 
 %if 0%{?rhel}
 ExclusiveArch:  %{ix86} x86_64
@@ -23,7 +26,7 @@ Requires:       %{name}%{?_isa} = %{version}-%{release}
 This package contains development files for %{name}.
 
 %prep
-%setup -q -n LuaJIT-%{version}
+%autosetup -n LuaJIT-%{commit}
 echo '#!/bin/sh' > ./configure
 chmod +x ./configure
 
@@ -76,6 +79,11 @@ find %{buildroot} -type f -name *.a -delete
 %{_libdir}/pkgconfig/*.pc
 
 %changelog
+* Mon Oct 03 2022 Carl George <carl@george.computer> - 2.0.5-1.20220914.46e62cd
+- Update to latest snapshot of 2.0 branch
+- Fixes CVE-2020-15890, resolves rhbz#1860331
+- Fixes CVE-2020-24372, resolves rhbz#1870308
+
 * Fri Aug 07 2015 Oliver Haessler <oliver@redhat.com> - 2.0.4-3
 - only build x86_64 on EPEL as luajit has no support for ppc64
 
diff --git a/sources b/sources
index e8c7ff2..9be841b 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-dd9c38307f2223a504cbfb96e477eca0  LuaJIT-2.0.4.tar.gz
+SHA512 (LuaJIT-46e62cd.tar.gz) = 8678945bffab6f8768f6bbfd1e69acd1ec519569746d28e546bb1fb69bfdfdffa66728631a974601071578573a8ae4c2bc2526d59719b898b1287758ce8f1160