diff --git a/.gitignore b/.gitignore
index d616a91..01c732c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -241,3 +241,7 @@ samba-3.6.0pre1.tar.gz
 /samba-4.14.0rc4.tar.asc
 /samba-4.14.0.tar.xz
 /samba-4.14.0.tar.asc
+/samba-4.14.1.tar.xz
+/samba-4.14.1.tar.asc
+/samba-4.14.2.tar.xz
+/samba-4.14.2.tar.asc
diff --git a/samba.spec b/samba.spec
index 77e355a..1cd7a05 100644
--- a/samba.spec
+++ b/samba.spec
@@ -108,13 +108,13 @@
 
 %define samba_requires_eq()  %(LC_ALL="C" echo '%*' | xargs -r rpm -q --qf 'Requires: %%{name} = %%{epoch}:%%{version}\\n' | sed -e 's/ (none):/ /' -e 's/ 0:/ /' | grep -v "is not")
 
-%global main_release 1
+%global main_release 0
 
-%global samba_version 4.14.0
+%global samba_version 4.14.2
 %global talloc_version 2.3.2
 %global tdb_version 1.4.3
 %global tevent_version 0.10.2
-%global ldb_version 2.2.0
+%global ldb_version 2.3.0
 # This should be rc1 or nil
 %global pre_release %nil
 
@@ -3839,6 +3839,16 @@ fi
 %endif
 
 %changelog
+* Thu Mar 25 2021 Guenther Deschner <gdeschner@redhat.com> - 4.14.2-0
+- Update to Samba 4.14.2
+- related: #1941400, #1942496 - Security fixes for CVE-2020-27840
+- related: #1941402, #1942497 - Security fixes for CVE-2021-20277
+
+* Wed Mar 24 2021 Guenther Deschner <gdeschner@redhat.com> - 4.14.1-0
+- Update to Samba 4.14.1
+- resolves: #1941400, #1942496 - Security fixes for CVE-2020-27840
+- resolves: #1941402, #1942497 - Security fixes for CVE-2021-20277
+
 * Tue Mar 09 2021 Guenther Deschner <gdeschner@redhat.com> - 4.14.0-3
 - Update to Samba 4.14.0
 
diff --git a/sources b/sources
index e353852..03983cb 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (samba-4.14.0.tar.xz) = 0f8e5d6e404769b37562ab7660e9829139e4cdea6288a7ff93f244e5dd02d2b35659321cc5dfd38f3b3e55e7c044626397ef959e3887e32cc9dc70ad8061d1d3
-SHA512 (samba-4.14.0.tar.asc) = 701e6df132549d7f627fb08ff187d448382a657f332c9d0368c53f0583287712537f5f510a8c7a6b5cd20e7ee2cae210c3f789704b47095a27bbaedbff29d992
+SHA512 (samba-4.14.2.tar.xz) = 5353cf67eac165afc0443639266354402f8d20437f8cd9389ff33201ab8261aacd21cfb9140b5816a9c39e2471fe6bce405d5b99103b1410768f56619010429d
+SHA512 (samba-4.14.2.tar.asc) = 586d8a38be861195f87f4d23149c5483494a7fdbb530f4707b8ce0cfb39723ca0b6c5d9c1064c6235d1bb652558c5c113482d46163982e67c78bff2238605e25