diff --git a/python-rsa.changes b/python-rsa.changes
index a3885d1..971884b 100644
--- a/python-rsa.changes
+++ b/python-rsa.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Thu Jan 28 23:02:47 UTC 2021 - Dirk Müller <dmueller@suse.com>
+
+- update to 4.7:
+  * CVE-2020-25658 - Bleichenbacher-style timing oracle in PKCS#1 v1.5 decryption code
+  * Add padding length check as described by PKCS#1 v1.5
+  * Reuse of blinding factors to speed up blinding operations.
+  * Declare & test support for Python 3.9 
+
 -------------------------------------------------------------------
 Wed Dec  9 10:45:29 UTC 2020 - Benjamin Greiner <code@bnavigator.de>
 
diff --git a/python-rsa.spec b/python-rsa.spec
index 7461ed0..7cc8c39 100644
--- a/python-rsa.spec
+++ b/python-rsa.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package python-rsa
 #
-# Copyright (c) 2020 SUSE LLC
+# Copyright (c) 2021 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -19,7 +19,7 @@
 %{?!python_module:%define python_module() python-%{**} python3-%{**}}
 %define skip_python2 1
 Name:           python-rsa
-Version:        4.6
+Version:        4.7
 Release:        0
 Summary:        Pure-Python RSA Implementation
 License:        Apache-2.0
diff --git a/rsa-4.6.tar.gz b/rsa-4.6.tar.gz
deleted file mode 100644
index fa4605f..0000000
--- a/rsa-4.6.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:109ea5a66744dd859bf16fe904b8d8b627adafb9408753161e766a92e7d681fa
-size 46954
diff --git a/rsa-4.7.tar.gz b/rsa-4.7.tar.gz
new file mode 100644
index 0000000..832388a
--- /dev/null
+++ b/rsa-4.7.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:69805d6b69f56eb05b62daea3a7dbd7aa44324ad1306445e05da8060232d00f4
+size 39298