diff --git a/openvpn-2.4.6.tar.xz b/openvpn-2.4.6.tar.xz
deleted file mode 100644
index 4eb0842..0000000
--- a/openvpn-2.4.6.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:4f6434fa541cc9e363434ea71a16a62cf2615fb2f16af5b38f43ab5939998c26
-size 943376
diff --git a/openvpn-2.4.6.tar.xz.asc b/openvpn-2.4.6.tar.xz.asc
deleted file mode 100644
index 48db35e..0000000
--- a/openvpn-2.4.6.tar.xz.asc
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEE1Ri5vWQ8+U2l7Zlw8TKxy68THK4FAlre2XIACgkQ8TKxy68T
-HK44BQ//aJOa+mT+BvGqhz3gZCrz3Ez6QumwJcn7Sx/zovxDf9KpNhFzykcwvtEd
-cNdorJ0il/WkW819srV6u+665MssiIxm6VFg5WzPz5I+nDO23QfETsSu54PIWQBX
-FrI9+6Rec+v4/Y/ktV4FVqUZ/36rnZjX43YYxwijs+tHXROiU9IhIKNmlGVfB7Iy
-tysJrqg5wzwhO+CTYTmMKwrb6LLTwcHxyWMqPiPrflIGY6sy41RlmvP90u1zmugx
-wIka3oOp7cD70KWMJns68Lc0OkFIz3RO2YW7KhunxdcNzCoHrlCr+HCBLSf8lPbx
-yL1sFOVk4ibZxFKzOvtOEJH1wYquI2B5Gd9QQxIeCNUUAvSh3E/0nMZNqJkwlObx
-OtxakHSqfskxVrpAz7OT9ARHIZUWVfYv/B+2454VfxRM2Rr+Job6xO2i5ukTKHc7
-AdCyY2lZlI8909MjJ0cc/ZeNyB4+jugUPz4XX8ebUctBP1gdUD6XZ6DDo11n9JpD
-lwbc/U1w2dmdGIZ3VrfVr3UiNhB5rxhwlxjSj24pczCjP58FQHKhX5u+3y8/MJ/7
-Efirugzny3ie1xpW7MOsrndjiv+wQD/gwaszA9HSQnJ4M49byOKJJSg+/Y0vR/PN
-8oIR7vnEJ5CS0EVaxBJeZifp+gM5L05xdfaGk5WJ9HZDsP4HkUE=
-=dY7S
------END PGP SIGNATURE-----
diff --git a/openvpn-2.4.7.tar.xz b/openvpn-2.4.7.tar.xz
new file mode 100644
index 0000000..145a651
--- /dev/null
+++ b/openvpn-2.4.7.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:a42f53570f669eaf10af68e98d65b531015ff9e12be7a62d9269ea684652f648
+size 953116
diff --git a/openvpn-2.4.7.tar.xz.asc b/openvpn-2.4.7.tar.xz.asc
new file mode 100644
index 0000000..5e5f6b8
--- /dev/null
+++ b/openvpn-2.4.7.tar.xz.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQIzBAABCAAdFiEEghddNaqNDoveX0+eXcNRgFrP6sYFAlxtSogACgkQXcNRgFrP
+6sZznw/+KDYBVFu2TuBVHQtRLH3y8Y+tG3/1ROVJw1CfXD2Pn1xZpsV532DiHxGU
+eYjDL6ZLl7pgLSblv7QBaTnwbaT1hE2cX3Fg86a+Qzufl5Fn3VDFRQlOcBDxA584
+0R0WLFUGDJNilhMJ/MlFgMuNvzo4iTyctmCDhFG5P5ed9SBQ7zZAOfPkYE8bQqxA
+h3lqlSDioXPOyHIqk6XQpYzzNf3ar4UzUqkBg3CrtEsiN7zB4Om/SkyVMgNr7wMG
+0n7vpZaylhX+Pm3aTQ4eFSyv41R29xrspUo88KzOX2omTgkiy3IRRLmRxfhRNLhm
+KPu+4GjUZUTkdUiAESp+eyRhA0DrxdyD/FsLSx+uEV3aFyMCkf9KUW6tKpDvr4JB
+vxPGJHkB51X//oAiDgDJZnn1lcHdbP62ydULePT4m+B1g5Tti2mUA23t7EcjKvr/
+O3NugKkyTlK+WI1XrO2QuO9crkhq6h41iLRbgjHXlXjv8w4p5yuSqDpQEsAm4RO+
+WvAfZd1LG9a8I8CFK2hwWrxOOv/LfZje+QgoZhUGHLW6Zi/rcvBygT2dKHznxjv5
+6Q1qd0D3cu6/2I/hd3wzjTt3KLrXnLM3n5iScHqJLyN39hEbp94CwXdEqrgpUJB6
+xaPwSfCR18tKKJh00wSJEYqQkWIilX74ZJRCIJ3sOr2RrrBcIDo=
+=FNy+
+-----END PGP SIGNATURE-----
diff --git a/openvpn.changes b/openvpn.changes
index a97758d..0cd1967 100644
--- a/openvpn.changes
+++ b/openvpn.changes
@@ -1,3 +1,65 @@
+-------------------------------------------------------------------
+Wed Feb 20 21:22:25 UTC 2019 - Michael Ströder <michael@stroeder.com>
+
+- Update to 2.4.7:
+  Adam Ciarcin?ski (1):
+    * Fix subnet topology on NetBSD (2.4).
+  Antonio Quartulli (3):
+    * add support for %lu in argv_printf and prevent ASSERT
+    * buffer_list: add functions documentation
+    * ifconfig-ipv6(-push): allow using hostnames
+  Arne Schwabe (7):
+    * Properly free tuntap struct on android when emulating persist-tun
+    * Add OpenSSL compat definition for RSA_meth_set_sign
+    * Add support for tls-ciphersuites for TLS 1.3
+    * Add better support for showing TLS 1.3 ciphersuites in --show-tls
+    * Use right function to set TLS1.3 restrictions in show-tls
+    * Add message explaining early TLS client hello failure
+    * Fallback to password authentication when auth-token fails
+  Christian Ehrhardt (1):
+    * systemd: extend CapabilityBoundingSet for auth_pam
+  David Sommerseth (1):
+    * plugin: Export base64 encode and decode functions
+  Gert Doering (3):
+    * Add %d, %u and %lu tests to test_argv unit tests.
+    * Fix combination of --dev tap and --topology subnet across multiple platforms.
+    * Add 'printing of port number' to mroute_addr_print_ex() for v4-mapped v6.
+  Gert van Dijk (1):
+    * Minor reliability layer documentation fixes
+  James Bekkema (1):
+    * Resolves small IV_GUI_VER typo in the documentation.
+  Jonathan K. Bullard (1):
+    * Clarify and expand management interface documentation
+  Lev Stipakov (5):
+    * Refactor NCP-negotiable options handling
+    * init.c: refine functions names and description
+    * interactive.c: fix usage of potentially uninitialized variable
+    * options.c: fix broken unary minus usage
+    * Remove extra token after #endif
+  Richard van den Berg via Openvpn-devel (1):
+    * Fix error message when using RHEL init script
+  Samy Mahmoudi (1):
+    * man: correct a --redirection-gateway option flag
+  Selva Nair (7):
+    * Replace M_DEBUG with D_LOW as the former is too verbose
+    * Correct the declaration of handle in 'struct openvpn_plugin_args_open_return'
+    * Bump version of openvpn plugin argument structs to 5
+    * Move get system directory to a separate function
+    * Enable dhcp on tap adapter using interactive service
+    * Pass the hash without the DigestInfo header to NCryptSignHash()
+    * White-list pull-filter and script-security in interactive service
+  Simon Rozman (2):
+    * Add Interactive Service developer documentation
+    * Detect TAP interfaces with root-enumerated hardware ID
+  Steffan Karger (7):
+    * man: add security considerations to --compress section
+    * mbedtls: print warning if random personalisation fails
+    * Fix memory leak after sighup
+    * travis: add OpenSSL 1.1 Windows build
+    * Fix --disable-crypto build
+    * Don't print OCC warnings about 'key-method', 'keydir' and 'tls-auth'
+    * buffer_list_aggregate_separator(): simplify code
+
 -------------------------------------------------------------------
 Fri Apr 27 12:25:19 UTC 2018 - max@suse.com
 
diff --git a/openvpn.spec b/openvpn.spec
index 550eb5e..bd14041 100644
--- a/openvpn.spec
+++ b/openvpn.spec
@@ -29,7 +29,7 @@
 %define _rundir %{_localstatedir}/run
 %endif
 Name:           openvpn
-Version:        2.4.6
+Version:        2.4.7
 Release:        0
 Summary:        Full-featured SSL VPN solution using a TUN/TAP Interface
 License:        SUSE-GPL-2.0-with-openssl-exception AND LGPL-2.1-only