diff --git a/yast2-firewall-4.0.19.tar.bz2 b/yast2-firewall-4.0.19.tar.bz2
deleted file mode 100644
index 0238d2a..0000000
--- a/yast2-firewall-4.0.19.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:e1c10d6184f7a5a2e613aaad1d7428a17e8fe425428d73b24e4927aee1ff3215
-size 57383
diff --git a/yast2-firewall-4.0.21.tar.bz2 b/yast2-firewall-4.0.21.tar.bz2
new file mode 100644
index 0000000..f06cc84
--- /dev/null
+++ b/yast2-firewall-4.0.21.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:04faa24099d5162f1d377dd81911cda3fad1da22ac13a904cc1424a518db2078
+size 57368
diff --git a/yast2-firewall.changes b/yast2-firewall.changes
index 56384aa..9eaf4f0 100644
--- a/yast2-firewall.changes
+++ b/yast2-firewall.changes
@@ -1,3 +1,20 @@
+-------------------------------------------------------------------
+Fri Mar 23 11:38:40 UTC 2018 - knut.anderssen@suse.com
+
+- AutoYaST SuSEFirewall2 Importer: Removed FW_LOG_ACCEPT_CRIT tag
+  from the list of supported options as firewalld only log dropped
+  packages and for accepted ones rich rules should be used instead
+  (bsc#1086655)
+- 4.0.21
+
+-------------------------------------------------------------------
+Wed Mar 21 23:42:21 UTC 2018 - knut.anderssen@suse.com
+
+- More fixes to the firewall AY schema (bsc#1013047)
+  - Added zone 'sources' element to the AutoYaST schema file.
+  - Permitted the use of 'listentry' element in list entries.
+- 4.0.20
+
 -------------------------------------------------------------------
 Tue Mar 13 07:24:55 UTC 2018 - knut.anderssen@suse.com
 
diff --git a/yast2-firewall.spec b/yast2-firewall.spec
index f4456b7..70ba87f 100644
--- a/yast2-firewall.spec
+++ b/yast2-firewall.spec
@@ -17,7 +17,7 @@
 
 
 Name:           yast2-firewall
-Version:        4.0.19
+Version:        4.0.21
 Release:        0
 
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build