diff --git a/samba-4.12.5+git.168.88cc07e6cbf.tar.bz2 b/samba-4.12.5+git.168.88cc07e6cbf.tar.bz2
deleted file mode 100644
index a9b7d66..0000000
--- a/samba-4.12.5+git.168.88cc07e6cbf.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:0fe88be82ef3a77979929f334be2a1315375b26f4ed107497f5262cfb16806a7
-size 24787220
diff --git a/samba-4.12.7+git.173.1aef95ad7db.tar.bz2 b/samba-4.12.7+git.173.1aef95ad7db.tar.bz2
new file mode 100644
index 0000000..d48a752
--- /dev/null
+++ b/samba-4.12.7+git.173.1aef95ad7db.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:37f639193b447519e117ee911ea071583d239fe77a045602d488511a079bc3af
+size 24789600
diff --git a/samba.changes b/samba.changes
index 0531872..87978e1 100644
--- a/samba.changes
+++ b/samba.changes
@@ -1,3 +1,45 @@
+-------------------------------------------------------------------
+Fri Sep 18 13:24:12 UTC 2020 - Samuel Cabrero <scabrero@suse.de>
+
+- Update to samba 4.12.7
+  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
+    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
+    (bso#14497);
+  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
+    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
+    (bsc#1176579); (bso#14497);
+  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
+    challenge; (bsc#1176579); (bso#14497);
+  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
+    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
+    (bsc#1176579); (bso#14497);
+
+- Update to samba 4.12.6
+  + s3: libsmb: Fix SMB2 client rename bug to a Windows server;
+    (bso#14403).
+  + dsdb: Allow "password hash userPassword schemes = CryptSHA256"
+    to work on RHEL7; (bso#14424).
+  + dbcheck: Allow a dangling forward link outside our known NCs;
+    (bso#14450).
+  + lib/debug: Set the correct default backend loglevel to
+    MAX_DEBUG_LEVEL; (bso#14426).
+  + PANIC: Assert failed in get_lease_type(); (bso#14428).
+  + util: Fix build on AIX by fixing the order of replace.h include;
+    (bso#14422).
+  + srvsvc_NetFileEnum asserts with open files; (bso#14355).
+  + KDC breaks with DES keys still in the database and
+    msDS-SupportedEncryptionTypes 31 indicating support for it;
+    (bso#14354).
+  + s3:smbd: Make sure vfs_ChDir() always sets
+    conn->cwd_fsp->fh->fd = AT_FDCWD; (bso#14427).
+  + PANIC: Assert failed in get_lease_type(); (bso#14428).
+  + docs: Fix documentation for require_membership_of of
+    pam_winbind.conf; (bso#14358).
+  + ctdb-scripts: Use nfsconf utility for variable values in CTDB
+    NFS scripts; (bso#14444).
+  + s3:winbind:idmap_ad: Make failure to get attrnames for schema
+    mode fatal; (bso#14425).
+
 -------------------------------------------------------------------
 Tue Jul 28 13:25:09 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
 
diff --git a/samba.spec b/samba.spec
index 9c2c929..50e1325 100644
--- a/samba.spec
+++ b/samba.spec
@@ -164,7 +164,7 @@ BuildRequires:  libtasn1-devel >= 3.8
 %else
 %define	build_make_smp_mflags %{?jobs:-j%jobs}
 %endif
-Version:        4.12.5+git.168.88cc07e6cbf
+Version:        4.12.7+git.173.1aef95ad7db
 Release:        0
 Url:            https://www.samba.org/
 Obsoletes:      samba-32bit < %{version}