diff --git a/freeipa.spec b/freeipa.spec
index 5a4dfc1..a4663fa 100644
--- a/freeipa.spec
+++ b/freeipa.spec
@@ -131,7 +131,7 @@
 %elif 0%{?fedora} == 40
 %global ds_version 3.0.4-3
 %elif 0%{?fedora} >= 41
-%global ds_version 3.1.1-3 
+%global ds_version 3.1.1-3
 %else
 %global ds_version 2.1.0
 %endif
@@ -230,7 +230,7 @@
 
 Name:           %{package_name}
 Version:        %{IPA_VERSION}
-Release:        23%{?rc_version:.%rc_version}%{?dist}
+Release:        24%{?rc_version:.%rc_version}%{?dist}
 Summary:        The Identity, Policy and Audit system
 
 License:        GPL-3.0-or-later
@@ -378,9 +378,9 @@ Patch0115:      0115-ipa-client-install-Fix-nsupdate-issues-when-dns_over.patch
 Patch0116:      0116-ipatests-fix-test_adtrust_install_with_non_ipa_user.patch
 Patch0117:      0117-ipa-idrange-fix-check-that-IPA-server-is-installed.patch
 Patch0118:      0118-ipa-migrate-only-remove-repl-state-attribute-options.patch
-Patch0119:      0119-ipa-kdb-support-storing-multiple-KVNO-for-the-same-p.patch
-Patch0120:      0120-Use-ipaplatform-tasks-for-krb5-enctypes.patch
-Patch0121:      0121-Add-test-for-master-key-upgrade.patch
+# Patch0119:      0119-ipa-kdb-support-storing-multiple-KVNO-for-the-same-p.patch
+# Patch0120:      0120-Use-ipaplatform-tasks-for-krb5-enctypes.patch
+# Patch0121:      0121-Add-test-for-master-key-upgrade.patch
 Patch0122:      0122-ipa-client-install-New-no-dnssec-validation-option.patch
 Patch0123:      0123-ipaserver-install-dns.py-Allow-to-Turn-off-DNSSEC-va.patch
 Patch0124:      0124-ipatests-Tests-for-32BitIdranges.patch
@@ -2053,6 +2053,9 @@ fi
 %endif
 
 %changelog
+* Tue Aug 19 2025 Rafael Jeffman <rjeffman@redhat.com> - 4.12.2-24
+- Resolves: RHEL-109895 Revert allow update of Kerberos master key
+
 * Wed Jul 30 2025 Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-23
 - Resolves: RHEL-105973 Include fixes in python3-ipatests package
 - Resolves: RHEL-105513 kdb: prevent double crash in RBCD ACL free
@@ -2619,7 +2622,7 @@ Bump version and rebuild because of rpm issue
 
 * Sat Apr 06 2019 Alexander Bokovoy <abokovoy@redhat.com> - 4.7.2-8
 - Fixed: rhbz#1696963 (Failed to install replica)
-  
+
 * Sat Apr 06 2019 Alexander Bokovoy <abokovoy@redhat.com> - 4.7.2-7
 - Support Samba 4.10
 - Support 389-ds 1.4.1.2-2.fc30 or later