diff --git a/samba-4.20.2+git.350.4cfcde9cdb.tar.bz2 b/samba-4.20.2+git.350.4cfcde9cdb.tar.bz2
deleted file mode 100644
index 3a94af8..0000000
--- a/samba-4.20.2+git.350.4cfcde9cdb.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:cf66829f5b03c937a1170f3e46f99fdeed5824bf49afb159232a03cbc9cef937
-size 44686019
diff --git a/samba-4.20.4+git.356.d4a5fa2a818.tar.bz2 b/samba-4.20.4+git.356.d4a5fa2a818.tar.bz2
new file mode 100644
index 0000000..6be5c45
--- /dev/null
+++ b/samba-4.20.4+git.356.d4a5fa2a818.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:9b0123d3003e00ba69ffee9882044f5970632dea3d382c74c66c5e0fe7fdb400
+size 44922677
diff --git a/samba.changes b/samba.changes
index 996910d..785593b 100644
--- a/samba.changes
+++ b/samba.changes
@@ -1,3 +1,39 @@
+-------------------------------------------------------------------
+Wed Aug  7 09:47:14 UTC 2024 - Noel Power <nopower@suse.com>
+
+- Fix a crash when joining offline and 'kerberos method' includes
+  keytab; (bsc#1228732).
+
+-------------------------------------------------------------------
+Tue Aug  6 10:51:13 UTC 2024 - Noel Power <noel.power@suse.com>
+
+- Update to 4.20.4
+  * --version-* options are still not ergonomic, and they reject
+    tilde characters; (bso#15673).
+
+- Update to 4.20.3
+  * Running samba-bgqd a a standalone systemd service does not
+    work; (bso#15683).
+  * When claims enabled with heimdal kerberos, unable to log on
+    to a Windows computer when user account need to change their
+    own password; (bso#15655).
+  * Invalid client warning about command line passwords;
+    (bso#15671).
+  * Version string is truncated in manpages; (bso#15672).
+  * cmdline_burn does not always burn secrets; (bso#15674).
+  * Samba does not parse SDDL found in defaultSecurityDescriptor
+    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685).
+  * The images don\'t build after the git security release and
+    CentOS 8 Stream is EOL; (bso#15660).
+  * Fix clock skew error message and memory cache clock skew
+    recovery; (bso#15676).
+  * Heimdal ignores _gsskrb5_decapsulate errors in
+    init_sec_context/repl_mutual; (bso#15603).
+  * s4:ldap_server: does not support tls channel bindings for
+    sasl binds; (bso#15621).
+  * CTDB socket output queues may suffer unbounded delays under
+    some special conditions; (bso#15678).
+
 -------------------------------------------------------------------
 Wed Jul 17 11:18:52 UTC 2024 - Samuel Cabrero <scabrero@suse.de>
 
diff --git a/samba.spec b/samba.spec
index 9715b45..cd03f73 100644
--- a/samba.spec
+++ b/samba.spec
@@ -160,7 +160,7 @@ BuildRequires:  liburing-devel
 %endif
 BuildRequires:  sysuser-tools
 
-Version:        4.20.2+git.350.4cfcde9cdb
+Version:        4.20.4+git.356.d4a5fa2a818
 Release:        0
 URL:            https://www.samba.org/
 Obsoletes:      samba-32bit < %{version}