diff --git a/SPECS/ipa.spec b/SPECS/ipa.spec
index 6aab42f..1617b31 100644
--- a/SPECS/ipa.spec
+++ b/SPECS/ipa.spec
@@ -64,7 +64,7 @@
 %if 0%{?rhel}
 %global package_name ipa
 %global alt_name freeipa
-%global krb5_version 1.18.2-2
+%global krb5_version 1.18.2-24
 %global krb5_kdb_version 8.0
 # 0.7.16: https://github.com/drkjam/netaddr/issues/71
 %global python_netaddr_version 0.7.19
@@ -189,7 +189,7 @@
 
 Name:           %{package_name}
 Version:        %{IPA_VERSION}
-Release:        6%{?rc_version:.%rc_version}%{?dist}.alma
+Release:        6%{?rc_version:.%rc_version}%{?dist}.alma.1
 Summary:        The Identity, Policy and Audit system
 
 License:        GPLv3+
@@ -1717,6 +1717,9 @@ fi
 %endif
 
 %changelog
+* Thu Aug 03 2023 Andrew Lukoshko <alukoshko@almalinux.org> - 4.9.11-6.alma.1
+- bump required version of krb5 (albz#411)
+
 * Thu Jul 13 2023 Andrew Lukoshko <alukoshko@almalinux.org> - 4.9.11-6.alma
 - kdb: Use krb5_pac_full_sign_compat() when available