diff --git a/python-repoze.who.changes b/python-repoze.who.changes
index 54ca59b..4e57910 100644
--- a/python-repoze.who.changes
+++ b/python-repoze.who.changes
@@ -1,3 +1,17 @@
+-------------------------------------------------------------------
+Mon Aug  3 11:09:47 UTC 2020 - Marketa Calabkova <mcalabkova@suse.com>
+
+- update to 2.4
+  * Add support for Python 3.6, 3.7, and 3.8.
+  * Drop support for Python 3.3.
+  * Fix travis configuration.
+  * Add ``samesite`` option to AuthTktCookiePlugin constructor.
+    If this is passed, it should be a string, and it will be used
+    to compose the Set-Cookie header's "SameSite" value, e.g.
+    if you pass ``samesite="Strict"`` into the constructor,
+    the cookie value for the auth tkt cooke will contain
+    ``SameSite=Strict``.
+
 -------------------------------------------------------------------
 Mon Apr  6 07:12:52 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>
 
diff --git a/python-repoze.who.spec b/python-repoze.who.spec
index 1ef4fc3..93d838e 100644
--- a/python-repoze.who.spec
+++ b/python-repoze.who.spec
@@ -19,20 +19,18 @@
 %{?!python_module:%define python_module() python-%{**} python3-%{**}}
 %global modname repoze.who
 Name:           python-repoze.who
-Version:        2.3
+Version:        2.4
 Release:        0
 Summary:        Identification and authentication framework for WSGI
 License:        SUSE-Repoze
 URL:            http://www.repoze.org
 Source:         https://files.pythonhosted.org/packages/source/r/repoze.who/%{modname}-%{version}.tar.gz
-BuildRequires:  %{python_module Paste}
 BuildRequires:  %{python_module WebOb}
 BuildRequires:  %{python_module pytest}
 BuildRequires:  %{python_module setuptools}
 BuildRequires:  %{python_module zope.interface}
 BuildRequires:  fdupes
 BuildRequires:  python-rpm-macros
-Requires:       python-Paste
 Requires:       python-WebOb
 Requires:       python-zope.interface
 BuildArch:      noarch
@@ -61,8 +59,7 @@ domain of the WSGI application.
 %python_expand %fdupes %{buildroot}%{$python_sitelib}/
 
 %check
-# test_brokenimpl zope.interface raises different assert
-%pytest -k 'not test_brokenimpl'
+%pytest
 
 %files %{python_files}
 %license LICENSE.txt
diff --git a/repoze.who-2.3.tar.gz b/repoze.who-2.3.tar.gz
deleted file mode 100644
index acff125..0000000
--- a/repoze.who-2.3.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:b95dadc1242acc55950115a629cfb1352669774b46d22def51400ca683efea28
-size 313128
diff --git a/repoze.who-2.4.tar.gz b/repoze.who-2.4.tar.gz
new file mode 100644
index 0000000..290af67
--- /dev/null
+++ b/repoze.who-2.4.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:cf97450de3c8eb5c03b4037be75b018db91befab1094204e452a0b1c0f7a94a6
+size 313408