diff --git a/.gitignore b/.gitignore
index 8860c90..86eaded 100644
--- a/.gitignore
+++ b/.gitignore
@@ -98,3 +98,5 @@
 /freeipa-4.9.0rc1.tar.gz.asc
 /freeipa-4.9.0rc2.tar.gz
 /freeipa-4.9.0rc2.tar.gz.asc
+/freeipa-4.9.0rc3.tar.gz
+/freeipa-4.9.0rc3.tar.gz.asc
diff --git a/freeipa.spec b/freeipa.spec
index 16f7646..646a504 100644
--- a/freeipa.spec
+++ b/freeipa.spec
@@ -165,7 +165,7 @@
 # "Version: @VERSION@" in freeipa.spec.in used for Autoconf string replacement
 %define IPA_VERSION 4.9.0
 # Release candidate version -- uncomment with one percent for RC versions
-%global rc_version rc2
+%global rc_version rc3
 %define AT_SIGN @
 # redefine IPA_VERSION only if its value matches the Autoconf placeholder
 %if "%{IPA_VERSION}" == "%{AT_SIGN}VERSION%{AT_SIGN}"
@@ -176,7 +176,7 @@
 
 Name:           %{package_name}
 Version:        %{IPA_VERSION}
-Release:        0.4%{?rc_version:.%rc_version}%{?dist}
+Release:        0.5%{?rc_version:.%rc_version}%{?dist}
 Summary:        The Identity, Policy and Audit system
 
 License:        GPLv3+
@@ -201,7 +201,6 @@ Patch1002:      1002-4.8.0-Remove-csrgen.patch
 Patch1003:      1003-Revert-WebUI-use-python3-rjsmin-to-minify-JavaScript.patch
 %endif
 # RHEL spec file only: END
-Patch0101:      freeipa-4.9.0-rc2-fixes.patch
 
 
 # For the timestamp trick in patch application
@@ -1677,6 +1676,11 @@ fi
 %endif
 
 %changelog
+* Thu Dec 10 20:06:03 EET 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.9.0-0.5.rc3
+- FreeIPA 4.9.0 release candidate 3
+- Enforce C.UTF-8 locale in systemd service units
+- Fold up fixes from Rawhide and RHEL 8.4 testing
+
 * Wed Dec  9 20:06:03 EET 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.9.0-0.4.rc2
 - Fix upgrade script for CA rule rewrites
 - Fix permissions for /run/ipa/ccaches
diff --git a/sources b/sources
index 1dae0ab..62928a2 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (freeipa-4.9.0rc2.tar.gz) = bc4282102451195e4c25b38b72dcea76eaffbf0a9f516d1c09df1c104ba8fdee0185db7131c85aaee54d2fd0ef88f4730f30479f26980ea4d74ab52b4c4c4469
-SHA512 (freeipa-4.9.0rc2.tar.gz.asc) = 21943770e057aaf85ed67582b6d64e5bdde7d10bd3b0588a3aae46a249467c740208838fc9e7cb8a687cad55588030005241a9ab9903e24b83b96cee96f770da
+SHA512 (freeipa-4.9.0rc3.tar.gz) = ded2920f0d864748bd7271212f4a30f86e45088c4591ba7ef8888ed13e5eeee4603c8958d16911b8ef1de9fe4d30ec859b700a69c84d0fef3671226caaa5a88d
+SHA512 (freeipa-4.9.0rc3.tar.gz.asc) = a0d8285a8826b56f42ebd1e78a7b318ba5daa4b6d0ee3bad26888da80720fde86dfe6cbd155db89e8ca81ed3f211ee64b45a380e3119acc7e3099c7e464125bb