diff --git a/devpi-common-4.0.2.tar.gz b/devpi-common-4.0.2.tar.gz
deleted file mode 100644
index f927df3..0000000
--- a/devpi-common-4.0.2.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:2d277701faf05d4a6f6cbdb7e040f93c0a00286dbe87d5c0a2eeaeba2055919c
-size 389075
diff --git a/devpi-common-4.0.3.tar.gz b/devpi-common-4.0.3.tar.gz
new file mode 100644
index 0000000..4ae4e3f
--- /dev/null
+++ b/devpi-common-4.0.3.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:f8e01b4f6df080f62284cce58c5bb1ce1e869b0c234aac7ad135609745fc173d
+size 391189
diff --git a/python-devpi-common.changes b/python-devpi-common.changes
index fb117ff..638bb58 100644
--- a/python-devpi-common.changes
+++ b/python-devpi-common.changes
@@ -1,7 +1,15 @@
+-------------------------------------------------------------------
+Sat Nov 25 12:54:26 UTC 2023 - Dirk Müller <dmueller@suse.com>
+
+- update to 4.0.3:
+  * Add ``is_prerelease`` and other methods to ``LegacyVersion``
+    to fix ``get_sorted_versions`` with ``stable=True`` and some
+    other cases.
+
 -------------------------------------------------------------------
 Wed Oct 18 08:31:53 UTC 2023 - Steve Kowalik <steven.kowalik@suse.com>
 
-- Update to 4.0.2: 
+- Update to 4.0.2:
   * Bug Fixes
     + Do not mark commands with returncode ``None`` from tox 4.x as failed.
     + Restore flushing after each written line in new TerminalWriter.
@@ -44,7 +52,7 @@ Mon Mar  6 17:21:35 UTC 2023 - Daniel Garcia <daniel.garcia@suse.com>
 -------------------------------------------------------------------
 Wed Oct 12 03:05:13 UTC 2022 - Yogalakshmi Arunachalam <yarunachalam@suse.com>
 
-- Update to version 3.7.0 
+- Update to version 3.7.0
   Features
    Add hash_type and fragment attributes to URL class.
    Replace pkg_resources usage with packaging.
@@ -57,7 +65,7 @@ Mon Aug  2 13:13:26 UTC 2021 - Markéta Machová <mmachova@suse.com>
 
 - Update to 3.6.0
   * support data-yanked attribute in HTMLPage parser.
-  * Replace “cached_property” with “lazy” package, which uses __dict__ 
+  * Replace “cached_property” with “lazy” package, which uses __dict__
     directly for much faster reads.
   * Hide password from URL representation.
   * Allow replacement of individual netloc parts with URL.replace method.
diff --git a/python-devpi-common.spec b/python-devpi-common.spec
index 1118e70..eeee2bc 100644
--- a/python-devpi-common.spec
+++ b/python-devpi-common.spec
@@ -18,7 +18,7 @@
 
 %{?sle15_python_module_pythons}
 Name:           python-devpi-common
-Version:        4.0.2
+Version:        4.0.3
 Release:        0
 Summary:        Utilities jointly used by devpi-server and devpi-client
 License:        MIT