diff --git a/nbdkit.spec b/nbdkit.spec
index feec1c7..26cb3ab 100644
--- a/nbdkit.spec
+++ b/nbdkit.spec
@@ -54,7 +54,7 @@
 %global source_directory 1.40-stable
 
 Name:           nbdkit
-Version:        1.40.1
+Version:        1.40.7
 Release:        1%{?dist}
 Summary:        NBD server
 
@@ -537,7 +537,7 @@ This package is a BitTorrent plugin for %{name}.
 Summary:        VMware VDDK plugin for %{name}
 Requires:       %{name}-server%{?_isa} = %{version}-%{release}
 # https://bugzilla.redhat.com/show_bug.cgi?id=1931818
-Requires:       libxcrypt-compat
+Requires:       libxcrypt-compat%{?_isa}
 
 %description vddk-plugin
 This package is a plugin for %{name} which connects to
@@ -1492,6 +1492,31 @@ fi
 
 
 %changelog
+* Sat Jul 05 2025 Richard W.M. Jones <rjones@redhat.com> - 1.40.7-1
+- New upstream stable branch version 1.40.7
+- Contains data integrity fix: "server: Fix .zero fallback path"
+
+* Sat May 10 2025 Richard W.M. Jones <rjones@redhat.com> - 1.40.6-1
+- New upstream stable branch version 1.40.6
+
+* Fri Feb 28 2025 Björn Esser <besser82@fedoraproject.org> - 1.40.5-2
+- Change Requires: libxcrypt-compat to be archful
+
+* Tue Feb 11 2025 Richard W.M. Jones <rjones@redhat.com> - 1.40.5-1
+- New upstream stable branch version 1.40.5
+
+* Wed Jan 29 2025 Jerry James <loganjerry@gmail.com> - 1.40.4-2
+- OCaml 5.2.1 rebuild for Fedora 41
+
+* Fri Sep 27 2024 Richard W.M. Jones <rjones@redhat.com> - 1.40.4-1
+- New upstream stable branch version 1.40.4
+
+* Sun Sep 08 2024 Richard W.M. Jones <rjones@redhat.com> - 1.40.3-1
+- New upstream stable branch version 1.40.3
+
+* Sat Aug 24 2024 Richard W.M. Jones <rjones@redhat.com> - 1.40.2-1
+- New upstream stable branch version 1.40.2
+
 * Mon Jul 29 2024 Richard W.M. Jones <rjones@redhat.com> - 1.40.1-1
 - New upstream stable branch version 1.40.1
 
diff --git a/sources b/sources
index 6d8aad4..38f0b62 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (nbdkit-1.40.1.tar.gz) = 365dd441c22ee7d515b566bac5e9f652c4e3c11108924a100c71d8c55fcde19ee802d00ed85c0ce5b04b4b0a643b9188d831abf1cb5a35c34b86a19fa0264171
-SHA512 (nbdkit-1.40.1.tar.gz.sig) = 9407350225fe4f5fae5a4a3757328fe0c1b468e851a241b1077e5469c931afa2f8a8e6b001f405ea6be12249eab576f9786b82f14cc03f170bb9fa420aeda381
+SHA512 (nbdkit-1.40.7.tar.gz) = 13559a3d8f2183621b2bbd1454f7c15a55e3909bd34ec8d7930186cbcc53c7a48afb75aad8ea7fb3707e463a322685da18dedcee8dffca68bc11d7f3da8305d4
+SHA512 (nbdkit-1.40.7.tar.gz.sig) = c63eab3107ac9c95bebc27499dee29a3fd60720133e0fa59fa7423df9bdc4ce1f0f9acb8cab4c3c8c917c7efe7469649c5d3014241af1a93a843d1d5f7eaa315