diff --git a/nsd-4.3.6.tar.gz b/nsd-4.3.6.tar.gz
deleted file mode 100644
index 3175d4c..0000000
--- a/nsd-4.3.6.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:bee6c0cf5525acc41dade9ec9e29435299211b0de290059878f7e53249e75f18
-size 1197835
diff --git a/nsd-4.3.6.tar.gz.asc b/nsd-4.3.6.tar.gz.asc
deleted file mode 100644
index 89b6e59..0000000
--- a/nsd-4.3.6.tar.gz.asc
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEE7fqj8spObrBWga+On28cLX4EX40FAmBsRK0ACgkQn28cLX4E
-X42mHA//Wv40jjkNC5nKp056LJ3r5sfSko0wY+ncAaf3eA/MxA6RskjZHSZiw7m+
-jgocp7ZocsxLYAFIdgJK9PlPLFcxTB8KjcqoLIoPyUX6PQERS2IZ+Di8ylxSJxEB
-sYIhI9n7tU7bjqv87g1/KUqvIAwt0q+gja8qiwRtppwU33B0C2C96yLerjxHb+2C
-IJP0YFfoUJ4PFWv0dI7nUoXc6U9HM3tq9lKuA08aDbajhBUBjf4zDD11aLJJN/wW
-GFnLHonFO2slbcyrRX2ejYCdT7g5KQSbIzgtnbP4mWqGrGgYHbHgwckpC3y584zx
-5L2SfBuvE4JCnshyeH91x8493QEEqpB6/6BJjehQAZdCzDR+dtR1HgqeuY3cMRFQ
-FjZ5GwoYlneCPLfm7xfnLZO6oMf+qNIRNr6scldvaubEyu89xAfYWHDePy6iEiWQ
-dbKmk/f4fokoPWagT+RVbMQ+cVRc6TPkmG9iLRYjjesUi8NRt5t3LK587KIim+U8
-hC6dp+GtfeDS/B+Ltze0w9DqeXFOHo0wpOEP90uHsySrjhhxuR60Q6FvBWgWDCLR
-BRxthfMs4EtHTbozWvoNnp90jQ3iVJw62yES/kR8rEHkULZXXnwd6UAHoqgGRcrd
-QbkEYbdar8fth+wPOA+2j3x5Gh0F5sPeFVtO7zuddThiIFrgEbE=
-=jTIN
------END PGP SIGNATURE-----
diff --git a/nsd-4.3.7.tar.gz b/nsd-4.3.7.tar.gz
new file mode 100644
index 0000000..3bcd9f2
--- /dev/null
+++ b/nsd-4.3.7.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:fd3b9ec53bbd168d567a0bfcdf140c966511fdaf78bd539d091c1a13c13be8ad
+size 1221215
diff --git a/nsd-4.3.7.tar.gz.asc b/nsd-4.3.7.tar.gz.asc
new file mode 100644
index 0000000..492a664
--- /dev/null
+++ b/nsd-4.3.7.tar.gz.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=k64c
+-----END PGP SIGNATURE-----
diff --git a/nsd.changes b/nsd.changes
index bc47491..fa96941 100644
--- a/nsd.changes
+++ b/nsd.changes
@@ -1,3 +1,35 @@
+-------------------------------------------------------------------
+Thu Jul 22 18:21:09 UTC 2021 - Michael Ströder <michael@stroeder.com>
+
+- New upstream release 4.3.7
+
+FEATURES:
+- Syntax of SVCB and HTTPS RR type as per draft-ietf-dnsop-svcb-https
+- Client side DNS Zone Transfer-over-TLS (XoT) support as per
+  draft-ietf-dprive-xfr-over-tls
+- Interoperable DNS Cookies support as per RFC7873 and RFC9018
+
+BUG FIXES:
+- Fix for #170: Fix build warnings when IPv6 is disabled.
+- Fix #170: Disabled IPv6 and DNSTAP enabled triggers a build error.
+- Fix for #128: Skip over sendmmsg invalid argument when port is zero.
+- Fix #171: Invalid negative response (NSEC3) after IXFR.
+- Fix to make nsec3_chain_find_prev return NULL if one nsec3 left.
+- Fix #174: NS Records below delegation are not ignored (nsd-checkzone
+  also does not raise any issue).
+- Fix #176: please review Loglevel on missing zonefile.
+- Update the ACX_CHECK_NONBLOCKING_BROKEN test for the configure
+  script.
+- Fix #179: log notice and server-count.
+- Update configure nonblocking test to use host.
+- Fix #168: Buffer overflow in the dname_to_string() function
+- Fixes for child server processes getting out of sync with the
+  dnstap-collector process
+- Fix gcc-11 warning on array bounds.
+- Fix compile of cookies on FreeBSD without IPv6.
+- Fix for loop initial declaration for nonc99 compiler
+- Fix typo in xfrd-tcp.c.
+
 -------------------------------------------------------------------
 Tue Apr  6 18:32:52 UTC 2021 - Michael Ströder <michael@stroeder.com>
 
diff --git a/nsd.spec b/nsd.spec
index 1b01435..7a6d4e7 100644
--- a/nsd.spec
+++ b/nsd.spec
@@ -23,7 +23,7 @@
 %define zonesdir   %{configdir}/zones
 %define pidfile    %{_rundir}/nsd/nsd.pid
 Name:           nsd
-Version:        4.3.6
+Version:        4.3.7
 Release:        0
 #
 Summary:        An authoritative-only domain name server