diff --git a/kexec-tools.spec b/kexec-tools.spec
index 13e918c..b1591f4 100644
--- a/kexec-tools.spec
+++ b/kexec-tools.spec
@@ -1,11 +1,11 @@
 %global eppic_ver e8844d3793471163ae4a56d8f95897be9e5bd554
 %global eppic_shortver %(c=%{eppic_ver}; echo ${c:0:7})
-%global mkdf_ver 1.7.3
+%global mkdf_ver 1.7.4
 %global mkdf_shortver %(c=%{mkdf_ver}; echo ${c:0:7})
 
 Name: kexec-tools
 Version: 2.0.27
-Release: 2%{?dist}
+Release: 3%{?dist}
 License: GPLv2
 Summary: The kexec/kdump userspace component
 
@@ -408,6 +408,11 @@ fi
 %endif
 
 %changelog
+* Wed Nov 8 2023 Tao Liu <ltao@redhat.com> - 2.0.27-3
+- Rebase makedumpfile to v1.7.4
+- powerpc: update kdumpctl to load kernel signing key for fadump
+- powerpc: update kdumpctl to remove deletion of kernel signing key once loaded
+
 * Mon Nov 6 2023 Tao Liu <ltao@redhat.com> - 2.0.27-2
 - kexec: update manpage with explicit mention of clean kexec
 
diff --git a/sources b/sources
index 1448b32..c12e9e3 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
 SHA512 (eppic-e8844d3.tar.gz) = d86b9f90c57e694107272d8f71b87f66a30743b9530480fb6f665026bbada4c6b0205a83e40b5383663a945681cfbfcf1ee79469fc219ddf679473c4b2290763
-SHA512 (makedumpfile-1.7.3.tar.gz) = a8e2ef5fdb45e6ed57c8b63f242d989bf1a66746ff665aefb7a52fc5d6d73b71171a08de1dc080ab31130938e2caea414929a5b64be9ee7443cf646c35ce3822
 SHA512 (kexec-tools-2.0.27.tar.xz) = 30b5ef7c2075dfd11fd1c3c33abe6b60673400257668d60145be08a2472356c7191a0810095da0fa32e327b9806a7578c73129ac0550d26c28ea6571c88c7b3c
+SHA512 (makedumpfile-1.7.4.tar.gz) = 6c3455b711bd4e120173ee07fcc5ff708ae6d34eaee0f4c135eca7ee0e0475b4d391429c23cf68e848b156ee3edeab956e693a390d67ccc634c43224c7129a96