diff --git a/.gitignore b/.gitignore
index ca5815e..04fffa0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,3 @@
-/chrony-4.5.tar.gz
-/chrony-4.5-tar-gz-asc.txt
-/clknetsim-5d1dc0.tar.gz
+/chrony-4.6.1.tar.gz
+/chrony-4.6.1-tar-gz-asc.txt
+/clknetsim-64df92.tar.gz
diff --git a/chrony-defconfig.patch b/chrony-defconfig.patch
new file mode 100644
index 0000000..92d5669
--- /dev/null
+++ b/chrony-defconfig.patch
@@ -0,0 +1,15 @@
+diff --git a/examples/chrony.conf.example2 b/examples/chrony.conf.example2
+index 03e7d47b..bf2bbdda 100644
+--- a/examples/chrony.conf.example2
++++ b/examples/chrony.conf.example2
+@@ -37,8 +37,8 @@ ntsdumpdir /var/lib/chrony
+ # Insert/delete leap seconds by slewing instead of stepping.
+ #leapsecmode slew
+ 
+-# Set the TAI-UTC offset of the system clock.
+-#leapseclist /usr/share/zoneinfo/leap-seconds.list
++# Get TAI-UTC offset and leap seconds from the system tz database.
++#leapsectz right/UTC
+ 
+ # Specify directory for log files.
+ logdir /var/log/chrony
diff --git a/chrony.spec b/chrony.spec
index 51a9c3a..69ac7be 100644
--- a/chrony.spec
+++ b/chrony.spec
@@ -1,5 +1,5 @@
 %global _hardened_build 1
-%global clknetsim_ver 5d1dc0
+%global clknetsim_ver 64df92
 %bcond_without debug
 %bcond_without nts
 
@@ -8,8 +8,8 @@
 %endif
 
 Name:           chrony
-Version:        4.5
-Release:        3%{?dist}
+Version:        4.6.1
+Release:        1%{?dist}
 Summary:        An NTP client/server
 
 License:        GPL-2.0-only
@@ -25,6 +25,8 @@ Source10:       https://gitlab.com/chrony/clknetsim/-/archive/master/clknetsim-%
 
 # add distribution-specific bits to DHCP dispatcher
 Patch1:         chrony-nm-dispatcher-dhcp.patch
+# revert upstream changes in packaged configuration examples
+Patch2:         chrony-defconfig.patch
 
 BuildRequires:  libcap-devel libedit-devel nettle-devel pps-tools-devel
 BuildRequires:  gcc gcc-c++ make bison systemd gnupg2
@@ -59,6 +61,7 @@ service to other computers in the network.
 %setup -q -n %{name}-%{version}%{?prerelease} -a 10
 %{?gitpatch:%patch -P 0 -p1}
 %patch -P 1 -p1 -b .nm-dispatcher-dhcp
+%patch -P 2 -p1 -b .defconfig
 
 %{?gitpatch: echo %{version}-%{gitpatch} > version.txt}
 
@@ -205,6 +208,12 @@ fi
 %dir %attr(750,chrony,chrony) %{_localstatedir}/log/chrony
 
 %changelog
+* Tue Oct 08 2024 Miroslav Lichvar <mlichvar@redhat.com> 4.6.1-1
+- update to 4.6.1
+
+* Tue Sep 03 2024 Miroslav Lichvar <mlichvar@redhat.com> 4.6-1
+- update to 4.6
+
 * Tue Jan 23 2024 Fedora Release Engineering <releng@fedoraproject.org> - 4.5-3
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
 
diff --git a/sources b/sources
index 970d87e..a3dab97 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (chrony-4.5.tar.gz) = 58a449e23186da799064b16ab16f799c1673296984b152b43e87c620d86e272c55365e83439d410fc89e4e0ba0befd7d5c625eac78a6665813b7ea75444f71b5
-SHA512 (chrony-4.5-tar-gz-asc.txt) = 05470e6cc34524fdab494f70cee71d46172b38bdd4acd8173ac79fdec12178239248880db474437690094aae7909002113289ac7f9305130c5e0a1d9364122cb
-SHA512 (clknetsim-5d1dc0.tar.gz) = 7d542443d7d9334d900cee821207fab1ee87e57fda6580a9d894f65fb36d265fdc4a72022b4293134d54cdeffba7e84d2f68f732f4b228b84d846d8668b314b2
+SHA512 (chrony-4.6.1.tar.gz) = 646ae08f2587366236796f2399d8ab3eb570979e0d82f5d13f5cec49939054c876cc93dc20c8d38e105fd3500e1720d05a223a15076783cd882d0de43afd9c7e
+SHA512 (chrony-4.6.1-tar-gz-asc.txt) = 992b706636bf3a7eb6d502562a4990c9d8e20e5f3011d2cdb2ceb32220e9a1c2bfa6eca767212cee49b811823872602dc33f9e7201a7f9a93cc9c90e81b1db49
+SHA512 (clknetsim-64df92.tar.gz) = 3253e6823b66f23f63203aad0ea22c25cf9d1f5af789722662f4d383111cb2c1816cb23d2fa06171a65b102ae82a5371376becb029d7c9b163b0aee710374c02