diff --git a/dnsmasq/.signature b/dnsmasq/.signature
index c2a325c2b..c84392a38 100644
--- a/dnsmasq/.signature
+++ b/dnsmasq/.signature
@@ -1,7 +1,7 @@
 untrusted comment: verify with /etc/ports/opt.pub
-RWSE3ohX2g5d/bi+0I9Oj2OTSDS2tUFqERTiHp9l+riUJLFnOf54HEBTile41TBRt3nM1/MfAQzHvcBmN901JJVF4zHzlQJLjAg=
-SHA256 (Pkgfile) = 4d039fa3ab52e379c99156fd4f42761e6bd43ed60441af8d93d2d3b57b7b0c46
+RWSE3ohX2g5d/cPXK/DMB9lNx2o4hyoyJUwlv9zp3VUEg0ZErNCeIeGug3Ig+x+ZPTjBY4/DeEKijApThc2O8DXjlkmN2bH3Lgg=
+SHA256 (Pkgfile) = 0e58f340624796795665723978e21536d324e66d5500720fffc18e0860ed1331
 SHA256 (.footprint) = a9b2926c49f21dee91cc4b4186a4abc2494b610a40941467c281573e2f9c76d9
-SHA256 (dnsmasq-2.85.tar.xz) = ad98d3803df687e5b938080f3d25c628fe41c878752d03fbc6199787fee312fa
+SHA256 (dnsmasq-2.86.tar.xz) = 28d52cfc9e2004ac4f85274f52b32e1647b4dbc9761b82e7de1e41c49907eb08
 SHA256 (dnsmasq-config.patch) = bf7b680b43e8711e10762be6ca9c5c42e03c6c538392fd32beb2bbcc219f568d
 SHA256 (dnsmasq) = 3c5425d2662177614a9f79a89027e03d2622687c1b387f62d6bf73326fbd59b1
diff --git a/dnsmasq/Pkgfile b/dnsmasq/Pkgfile
index 518fb3c5e..42bb746be 100644
--- a/dnsmasq/Pkgfile
+++ b/dnsmasq/Pkgfile
@@ -4,7 +4,7 @@
 # Depends on: nettle
 
 name=dnsmasq
-version=2.85
+version=2.86
 release=1
 source=(http://www.thekelleys.org.uk/$name/$name-$version.tar.xz \
 	$name-config.patch dnsmasq)
@@ -12,7 +12,6 @@ source=(http://www.thekelleys.org.uk/$name/$name-$version.tar.xz \
 build () {
 	cd $name-$version
 
-	#sed 's/rc2//' -i VERSION
 	patch -p1 -i $SRC/$name-config.patch
 
 	make COPTS="-DHAVE_DNSSEC" CFLAGS="$CFLAGS -W -Wall"