diff --git a/freeipa.spec b/freeipa.spec
index 0edc516..0dd680d 100644
--- a/freeipa.spec
+++ b/freeipa.spec
@@ -66,11 +66,11 @@
 %if 0%{?rhel}
 %global package_name ipa
 %global alt_name freeipa
-%global krb5_version 1.19.1-15
-%global krb5_kdb_version 8.0
+%global krb5_version 1.20.1-1
+%global krb5_kdb_version 9.0
 # 0.7.16: https://github.com/drkjam/netaddr/issues/71
 %global python_netaddr_version 0.7.19
-%global samba_version 4.17.2-103
+%global samba_version 4.17.4-101
 %global slapi_nis_version 0.56.4
 %global python_ldap_version 3.1.0-1
 %if 0%{?rhel} < 9
@@ -217,7 +217,7 @@
 
 Name:           %{package_name}
 Version:        %{IPA_VERSION}
-Release:        2%{?rc_version:.%rc_version}%{?dist}
+Release:        3%{?rc_version:.%rc_version}%{?dist}
 Summary:        The Identity, Policy and Audit system
 
 License:        GPLv3+
@@ -1748,6 +1748,10 @@ fi
 %endif
 
 %changelog
+* Wed Dec 21 2022 Alexander Bokovoy <abokovoy@redhat.com> - 4.10.1-3
+- Rebuild against krb5 1.20.1 ABI
+- Resolves: rhbz#2155425
+
 * Fri Dec 9 2022 Florence Blanc-Renaud <flo@redhat.com> - 4.10.1-2
 - Resolves: rhbz#2148887 MemberManager with groups fails
 - Resolves: rhbz#2150335 idm:client is missing dependency on krb5-pkinit