diff --git a/yast2-firewall-4.0.20.tar.bz2 b/yast2-firewall-4.0.20.tar.bz2
deleted file mode 100644
index 0af668b..0000000
--- a/yast2-firewall-4.0.20.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:08ffcf8084921ab42b00b945137d450c9d732927d5b16dbb182fc841bef7f9e4
-size 57447
diff --git a/yast2-firewall-4.0.21.tar.bz2 b/yast2-firewall-4.0.21.tar.bz2
new file mode 100644
index 0000000..f06cc84
--- /dev/null
+++ b/yast2-firewall-4.0.21.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:04faa24099d5162f1d377dd81911cda3fad1da22ac13a904cc1424a518db2078
+size 57368
diff --git a/yast2-firewall.changes b/yast2-firewall.changes
index 01ba727..9eaf4f0 100644
--- a/yast2-firewall.changes
+++ b/yast2-firewall.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Fri Mar 23 11:38:40 UTC 2018 - knut.anderssen@suse.com
+
+- AutoYaST SuSEFirewall2 Importer: Removed FW_LOG_ACCEPT_CRIT tag
+  from the list of supported options as firewalld only log dropped
+  packages and for accepted ones rich rules should be used instead
+  (bsc#1086655)
+- 4.0.21
+
 -------------------------------------------------------------------
 Wed Mar 21 23:42:21 UTC 2018 - knut.anderssen@suse.com
 
diff --git a/yast2-firewall.spec b/yast2-firewall.spec
index f481bfd..70ba87f 100644
--- a/yast2-firewall.spec
+++ b/yast2-firewall.spec
@@ -17,7 +17,7 @@
 
 
 Name:           yast2-firewall
-Version:        4.0.20
+Version:        4.0.21
 Release:        0
 
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build