diff --git a/xpra-4.0.1.tar.xz b/xpra-4.0.1.tar.xz
deleted file mode 100644
index a1a38f7..0000000
--- a/xpra-4.0.1.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:77a4e6db10621c6e562362e052cf446afe6c8b576b6c02e486a3e03ed6122b67
-size 2788112
diff --git a/xpra-4.0.2.tar.xz b/xpra-4.0.2.tar.xz
new file mode 100644
index 0000000..e0c07c1
--- /dev/null
+++ b/xpra-4.0.2.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:7ddcca7fca3f594d2d71855c05defcaed566132911d61e04a113a612bf4c43b3
+size 2789360
diff --git a/xpra.changes b/xpra.changes
index ad9635f..6571d9a 100644
--- a/xpra.changes
+++ b/xpra.changes
@@ -1,3 +1,44 @@
+-------------------------------------------------------------------
+Fri Jun  5 11:25:10 UTC 2020 - Luigi Baldoni <aloisio@gmx.com>
+
+- Update to version 4.0.2
+  * fix encryption not honoured with TCP sockets upgraded to
+    WebSocket
+  * fix xpra top client refresh rate via timer
+  * fix opengl client info format shown in 'xpra top'
+  * fix format of attributes given to glXChooseVisual
+  * fix crashes in OpenGL context setup on X11
+  * fix race condition in window statistics
+  * fix server errors when non-interactive clients are connected
+  * fix tray toolbox app
+  * fix X11 server key symbol lookup via Xkb
+  * html5 fixes:
+    + fix missing desktop background
+    + client errors painting rgb32 data with a padded rowstride
+    + clipboard wrongly clearing data on failures
+    + compatibility issues with Internet Explorer
+    + missing transparency for windows in focus
+    + no windows focused after close
+    + connection errors caused by spurious packets
+    + error in invalid packet handler
+    + AES encrypted connections
+    + connection errors with AES and lz4 (disable lz4 for now)
+    + packet error with very small paint packets
+    + 'insecure passwords' option shown in the wrong cases
+    + handle window iconification messages
+    + update version in about page
+  * fix connection errors with 'None' values in bencoder (ie:
+    html5)
+  * fix connection errors with websocket connections and AES
+    encryption
+  * fix duplicate clipboard token sent with MS Windows servers
+  * fix window initialization errors causing server startup
+    failures
+  * remove invalid extra strings from mdns service name
+  * workaround bugs in pyxdg / menu configuration
+  * add 'terminator' to the 'text' application hint
+  * more explicit error message when trying to use python2
+
 -------------------------------------------------------------------
 Sun May 17 16:39:00 UTC 2020 - Luigi Baldoni <aloisio@gmx.com>
 
diff --git a/xpra.spec b/xpra.spec
index a2b7f37..3625c5c 100644
--- a/xpra.spec
+++ b/xpra.spec
@@ -19,7 +19,7 @@
 
 %global __requires_exclude ^typelib\\(GtkosxApplication\\)|typelib\\(GdkGLExt\\)|typelib\\(GtkGLExt\\).*$
 Name:           xpra
-Version:        4.0.1
+Version:        4.0.2
 Release:        0
 Summary:        Remote display server for applications and desktops
 License:        GPL-2.0-or-later AND BSD-3-Clause AND LGPL-3.0-or-later AND MIT