diff --git a/nsd-4.3.1.tar.gz b/nsd-4.3.1.tar.gz
deleted file mode 100644
index b047686..0000000
--- a/nsd-4.3.1.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:f4b34ace6651a81386464cc990f046e7328aa2485274fe8743086997129d8987
-size 1173582
diff --git a/nsd-4.3.1.tar.gz.asc b/nsd-4.3.1.tar.gz.asc
deleted file mode 100644
index d221be0..0000000
--- a/nsd-4.3.1.tar.gz.asc
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEE7fqj8spObrBWga+On28cLX4EX40FAl6YEscACgkQn28cLX4E
-X42mnQ/9GLqgkGVH6H+xuIMhmd+iSCBQq7ylPLV3tfOzrLgrhAoAdsbdv2RoIj8r
-/plENqBS1U9a3DzfZRT+w/qZ6IKQEtjJJgv7/lT/399El3rqdI4fkMXKT3n19UYx
-MCbxIwOV2oY9uFf7tTpCu6b8wE8uQyyOYYaLm7DWPXou69viHw1VxVmlmuLqd5i5
-hF9F5K5hWi9xa9K/WBmiQqn9SfAO6nFhH3z7k6bTWSY4GIwMPIdFcYMtSWBME+WJ
-ays/27cz3Mx3dMets1+8yXORTZZj2ovzHKiHEvZw8/1imfPf0GRz+Z3oNbtYodSt
-vde0pShVcki11N5swJaYk6MKF5eEAl0XJS0APlS05gm9YXhkLfR4Qo99do2mJ8q1
-Z8Ww7WZD4aiU1U/7l1FcGv0Z6WwBurCgQzPQGuJ2+WlJUYXYPIkCm0H9FVbX0xJn
-sQWKBZCTUAWQYbk8oZSuHyejlNuHfknX5VMt5zlRsCEwAp5TgQLMVx56DO55Ph89
-p0cPrFEyKdWkP6EIyaWbVykBVl7+/V+5n985CEyMavBDqq3cK7tye9dYRjmd3Uzb
-TgfvLwWW8UggaFthWG1pkhnv7aTHVdiG+gpx0LLi6jJ9n01rHzIEzH5Ymf+iSa0r
-wfjunGoTSGfdwX/5Zi6LzT5CN68s6hRViE0jI04SvBb2ZMPqKBg=
-=3yFM
------END PGP SIGNATURE-----
diff --git a/nsd-4.3.2.tar.gz b/nsd-4.3.2.tar.gz
new file mode 100644
index 0000000..c14e451
--- /dev/null
+++ b/nsd-4.3.2.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5b5cee2f80ed451f19e02dee620c71a98a781bd72a55810e0acc925fecaa8329
+size 1177939
diff --git a/nsd-4.3.2.tar.gz.asc b/nsd-4.3.2.tar.gz.asc
new file mode 100644
index 0000000..adc57fc
--- /dev/null
+++ b/nsd-4.3.2.tar.gz.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=KTQU
+-----END PGP SIGNATURE-----
diff --git a/nsd.changes b/nsd.changes
index 96b91d0..0a23b9e 100644
--- a/nsd.changes
+++ b/nsd.changes
@@ -1,3 +1,47 @@
+-------------------------------------------------------------------
+Tue Jul 14 19:02:21 UTC 2020 - Michael Ströder <michael@stroeder.com>
+
+- New upstream release 4.3.2
+
+FEATURES:
+- Fix #96: log-only-syslog: yes sets to only use syslog, fixes
+  that the default configuration and systemd results in duplicate
+  log messages.
+- Fix #107: nsd -v shows configure line, openssl version and libevent
+  version.
+- Fix #103 with #110: min-expire-time option.  To provide a lower
+  bound for expire period.  Expressed in number of seconds or
+  refresh+retry+1.
+
+BUG FIXES:
+- Fix for posix shell syntax for trap in nsd-control-setup
+- Fix to omit the listen-on lines from log at startup, unless verbose.
+- Fix uninitialised values for bindtodevice option at startup with
+  reuseport and multiple interfaces.
+- Fix #95: Removed make test check because tpkg not included in
+  release tarballs.
+- Fix unused parameter compile warnings.
+- Fix #97: EDNS unknown version: query not in response.
+- Fix #99: Fix copying of socket properties with reuseport enabled.
+- Document default value for tcp-timeout.
+- Merge PR#102 from and0x000: add missing default in documentation
+  for drop-updates.
+- Fix unlink of pidfile warning if not possible due to permissions,
+  nsd can display the message at high verbosity levels.
+- Removed contrib/nsd.service, example is too complicated and not
+  useful.
+- Do not log EAGAIN errors for sendmmsg, to stop log spam on OpenBSD.
+- Merge #108 from Nomis: Make the max-retry-time description clearer.
+- Retry when udp send buffer is full to wait until buffer space is
+  available.
+- Remove errno reset behaviour from sendmmsg and recvmmsg
+  replacement functions.
+- Fix unit test for different nsd-control-setup -h exit code.
+- Merge #112 from jaredmauch: log old and new serials when NSD
+  rejects an IXFR due to an old serial number.
+- Fix #106: Adhere better to xfrd bounds.  Refresh and retry times.
+- Fix #105: Clearing hash_tree means just emptying the tree.
+
 -------------------------------------------------------------------
 Thu Apr 16 19:04:58 UTC 2020 - Michael Ströder <michael@stroeder.com>
 
diff --git a/nsd.spec b/nsd.spec
index cb94a0d..0174ffb 100644
--- a/nsd.spec
+++ b/nsd.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package nsd
 #
-# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2020 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -23,14 +23,14 @@
 %define zonesdir   %{configdir}/zones
 %define pidfile    %{_rundir}/nsd/nsd.pid
 Name:           nsd
-Version:        4.3.1
+Version:        4.3.2
 Release:        0
 #
 Summary:        An authoritative-only domain name server
 #
 License:        BSD-3-Clause
 Group:          Productivity/Networking/DNS/Servers
-Url:            http://open.nlnetlabs.nl/nsd/
+URL:            http://open.nlnetlabs.nl/nsd/
 Source:         http://open.nlnetlabs.nl/downloads/nsd/nsd-%{version}.tar.gz
 Source1:        nsd.service
 Source2:        tmpfiles-nsd.conf