diff --git a/.gitignore b/.gitignore
index cca4b28..68d500d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -33,3 +33,4 @@
 /node-v0.10.33-stripped.tar.gz
 /node-v0.10.36-stripped.tar.gz
 /node-v4.2.2-stripped.tar.gz
+/node-v4.2.3-stripped.tar.gz
diff --git a/nodejs.spec b/nodejs.spec
index fd17b96..766c101 100644
--- a/nodejs.spec
+++ b/nodejs.spec
@@ -1,6 +1,6 @@
 Name: nodejs
-Version: 4.2.2
-Release: 4%{?dist}
+Version: 4.2.3
+Release: 1%{?dist}
 Summary: JavaScript runtime
 License: MIT and ASL 2.0 and ISC and BSD
 Group: Development/Languages
@@ -28,7 +28,7 @@ Patch1: nodejs-disable-gyp-deps.patch
 Patch2: nodejs-use-system-certs.patch
 
 # V8 presently breaks ABI at least every x.y release while never bumping SONAME
-%global v8_abi 4.6
+%global v8_abi 4.5
 
 BuildRequires: python-devel
 BuildRequires: libuv-devel >= 1.7.5
@@ -74,7 +74,7 @@ Provides: bundled(c-ares) = 1.10.1
 # even in point releases. Node.js upstream has now removed the ability to build
 # against a shared system version entirely.
 # See https://github.com/nodejs/node/commit/d726a177ed59c37cf5306983ed00ecd858cfbbef
-Provides: bundled(v8) = 4.6.85
+Provides: bundled(v8) = 4.5.103.35
 
 %description
 Node.js is a platform built on Chrome's JavaScript runtime
@@ -209,6 +209,11 @@ mv %{buildroot}/%{_datadir}/doc/node/gdbinit %{buildroot}/%{_pkgdocdir}/gdbinit
 %{_pkgdocdir}/html
 
 %changelog
+* Fri Dec 04 2015 Stephen Gallagher <sgallagh@redhat.com> 4.2.3-1
+- New upstream security release 4.2.3
+- https://github.com/nodejs/node/blob/v4.2.3/CHANGELOG.md
+- Fix incorrect v8 version
+
 * Wed Dec  2 2015 Peter Robinson <pbrobinson@fedoraproject.org> 4.2.2-4
 - Use nodejs_arches macro for arch definition (add aarch64 and power64 platforms)
 
diff --git a/sources b/sources
index 78914f6..20fa923 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-32d052698f6059e64eee5f06532e27fd  node-v4.2.2-stripped.tar.gz
+2dad5363627c0059ce262edb91157e2b  node-v4.2.3-stripped.tar.gz