diff --git a/.gitignore b/.gitignore
index 8446912..c6a27e8 100644
--- a/.gitignore
+++ b/.gitignore
@@ -18,3 +18,4 @@
 /openjdk-21.0.3+1-ea.tar.xz
 /openjdk-21.0.3+7-ea.tar.xz
 /openjdk-21.0.3+9.tar.xz
+/openjdk-21.0.4+1-ea.tar.xz
diff --git a/java-21-openjdk.spec b/java-21-openjdk.spec
index 4e5a27d..3a45c0e 100644
--- a/java-21-openjdk.spec
+++ b/java-21-openjdk.spec
@@ -307,7 +307,7 @@
 # New Version-String scheme-style defines
 %global featurever 21
 %global interimver 0
-%global updatever 3
+%global updatever 4
 %global patchver 0
 # We don't add any LTS designator for STS packages (Fedora and EPEL).
 # We need to explicitly exclude EPEL as it would have the %%{rhel} macro defined.
@@ -357,7 +357,7 @@
 %global origin_nice     OpenJDK
 %global top_level_dir_name   %{vcstag}
 %global top_level_dir_name_backup %{top_level_dir_name}-backup
-%global buildver        9
+%global buildver        1
 %global rpmrelease      1
 # Settings used by the portable build
 %global portablerelease 1
@@ -381,7 +381,7 @@
 # Release will be (where N is usually a number starting at 1):
 # - 0.N%%{?extraver}%%{?dist} for EA releases,
 # - N%%{?extraver}{?dist} for GA releases
-%global is_ga           1
+%global is_ga           0
 %if %{is_ga}
 %global build_type GA
 %global ea_designator ""
@@ -1487,6 +1487,7 @@ BuildRequires: harfbuzz-devel
 BuildRequires: lcms2-devel
 BuildRequires: libjpeg-devel
 BuildRequires: libpng-devel
+BuildRequires: zlib-devel
 %else
 # Version in src/java.desktop/share/legal/freetype.md
 Provides: bundled(freetype) = 2.13.2
@@ -1495,11 +1496,13 @@ Provides: bundled(giflib) = 5.2.1
 # Version in src/java.desktop/share/native/libharfbuzz/hb-version.h
 Provides: bundled(harfbuzz) = 8.2.2
 # Version in src/java.desktop/share/native/liblcms/lcms2.h
-Provides: bundled(lcms2) = 2.15.0
+Provides: bundled(lcms2) = 2.16.0
 # Version in src/java.desktop/share/native/libjavajpeg/jpeglib.h
 Provides: bundled(libjpeg) = 6b
 # Version in src/java.desktop/share/native/libsplashscreen/libpng/png.h
 Provides: bundled(libpng) = 1.6.40
+# Version in src/java.base/share/native/libzip/zlib/zlib.h
+Provides: bundled(zlib) = 1.3.1
 %endif
 
 # this is always built, also during debug-only build
@@ -2499,6 +2502,14 @@ cjc.mainProgram(args)
 %endif
 
 %changelog
+* Sat Jun 22 2024 Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.1-0.1.ea
+- Update to jdk-21.0.4+1 (EA)
+- Update release notes to 21.0.4+1
+- Switch to EA mode
+- Bump LCMS 2 version to 2.16.0 following JDK-8321489
+- Add zlib build requirement or bundled version (1.3.1), depending on system_libs setting
+- Related: RHEL-45355
+
 * Sun Apr 14 2024 Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.9-1
 - Update to jdk-21.0.3+9 (GA)
 - Update release notes to 21.0.3+9
diff --git a/sources b/sources
index debced2..c545d23 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
 SHA512 (tapsets-icedtea-6.0.0pre00-c848b93a8598.tar.xz) = 97d026212363b3c83f6a04100ad7f6fdde833d16579717f8756e2b8c2eb70e144a41a330cb9ccde9c3badd37a2d54fdf4650a950ec21d8b686d545ecb2a64d30
-SHA512 (openjdk-21.0.3+9.tar.xz) = cf6cf06fd3f019106ff9c633788190cbf191d65a539f12ba64768d1fb797a234c72856ac072132463a471da1460207264da78d63271371031cca7774884f3745
+SHA512 (openjdk-21.0.4+1-ea.tar.xz) = 32ffb303162069a8cbdae8ce760a30642b40569fe3044a73546d0126797334a86cbc99afdcfba09d5f74119cee0feb7fc51fd09c9e1d8d047f1d950f4fc66442