diff --git a/patches.tar.bz2 b/patches.tar.bz2
index fde1e05..724f3a8 100644
--- a/patches.tar.bz2
+++ b/patches.tar.bz2
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:09e993823d82c27fb3c01c944e8c8a5f34b5d7c1dc40d1608186f17d040a595e
-size 41213
+oid sha256:3a87b1860f8071112f560270a937d33a68c069aaf5ccaf8328809ebc7c2fb444
+size 41226
diff --git a/samba.changes b/samba.changes
index 9d73de6..5f4f48b 100644
--- a/samba.changes
+++ b/samba.changes
@@ -56,6 +56,12 @@ Fri Feb 10 23:00:14 CET 2017 - kukuk@suse.de
 
 - Fix check if we need to require insserv
 
+-------------------------------------------------------------------
+Thu Feb  9 15:23:21 UTC 2017 - nopower@suse.com
+
+- async_req: make async_connect_send() "reentrant";
+  (bso#12105); (bsc#1024416).
+
 -------------------------------------------------------------------
 Mon Feb  6 18:35:29 UTC 2017 - aaptel@suse.com
 
@@ -72,6 +78,11 @@ Wed Jan 25 17:20:31 UTC 2017 - ddiss@suse.com
 
 - Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).
 
+-------------------------------------------------------------------
+Mon Jan 23 21:44:03 UTC 2017 - dmulder@suse.com
+
+- Document "winbind: ignore domains" parameter; (bsc#1019416).
+
 -------------------------------------------------------------------
 Thu Jan 19 19:19:07 UTC 2017 - ddiss@suse.com
 
@@ -94,6 +105,17 @@ Mon Dec 19 19:11:20 UTC 2016 - jmcdonough@suse.com
   + various stability fixes in smbd
   + match file compression ReFS behavior
 
+-------------------------------------------------------------------
+Fri Dec  2 13:15:50 UTC 2016 - nopower@suse.com
+
+-  Add missing ldb module directory; (bnc#1012092).
+
+-------------------------------------------------------------------
+Thu Nov 17 08:33:07 UTC 2016 - nopower@suse.com
+
+- s3/client: obey 'disable netbios' smb.conf param, don't
+ connect via NBT port; (bsc#1009085); (bso#12418).
+
 -------------------------------------------------------------------
 Mon Sep 26 17:55:13 UTC 2016 - nopower@suse.com
 
@@ -126,6 +148,12 @@ Tue Aug 30 09:47:01 UTC 2016 - nopower@suse.com
 - Fix illegal memory access after memory has been deleted;
   (bso#11836); (bsc#975299).
 
+-------------------------------------------------------------------
+Mon Aug 29 10:25:40 UTC 2016 - nopower@suse.com
+
+- Prevent core, make sure response->extra_data.data is always
+  cleared out; (bsc#993692).
+
 -------------------------------------------------------------------
 Mon Aug 15 14:54:14 UTC 2016 - ddiss@suse.com
 
@@ -163,7 +191,7 @@ Tue Jun 14 17:49:59 UTC 2016 - jmcdonough@suse.com
 -------------------------------------------------------------------
 Thu Jun  9 17:12:14 UTC 2016 - jmcdonough@suse.com
 
-- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522). 
+- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).
 
 -------------------------------------------------------------------
 Thu Jun  9 12:46:18 UTC 2016 - jmcdonough@suse.com
@@ -199,7 +227,7 @@ Thu May 19 10:06:40 UTC 2016 - jmcdonough@suse.com
 Tue May  3 13:03:47 UTC 2016 - jmcdonough@suse.com
 
 - Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849);
-  (bsc#975962).
+  (bsc#975962); (bsc#979268), (bsc#977669).
 
 -------------------------------------------------------------------
 Thu Apr 28 22:48:17 UTC 2016 - jmcdonough@suse.com
@@ -225,6 +253,12 @@ Sat Apr  9 21:36:02 UTC 2016 - jmcdonough@suse.com
   + DCERPC server and client vulnerable to DOS and MITM attacks;
     CVE-2015-5370; (bso#11344); (bsc#936862).
 
+-------------------------------------------------------------------
+Fri Apr  8 10:23:22 UTC 2016 - nopower@suse.com
+
+- Fix samba.tests.messaging test and prevent potential tdb corruption
+  by removing obsolete now invalid tdb_close call; (bsc#974629).
+
 -------------------------------------------------------------------
 Tue Mar 22 17:36:01 UTC 2016 - lmuelle@suse.com
 
@@ -454,7 +488,8 @@ Tue Dec  1 16:48:13 UTC 2015 - lmuelle@suse.com
   + async_req: Fix non-blocking connect(); (bso#11564).
   + auth: gensec: Fix a memory leak; (bso#11565).
   + lib: util: Make non-critical message a warning; (bso#11566).
-  + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569).
+  + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569);
+    (bnc#949022).
   + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570).
   + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577).
   + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer;
diff --git a/samba.spec b/samba.spec
index b365fa0..6a6ae3c 100644
--- a/samba.spec
+++ b/samba.spec
@@ -152,7 +152,7 @@ BuildRequires:  librados-devel
 %else
 %define	build_make_smp_mflags %{?jobs:-j%jobs}
 %endif
-%define SOURCE_TIMESTAMP 3760
+%define SOURCE_TIMESTAMP 3761
 %define BRANCH %{version}
 %global with_mitkrb5 1
 %global with_dc 0
diff --git a/vendor-files.tar.bz2 b/vendor-files.tar.bz2
index 99dff89..ba0caab 100644
--- a/vendor-files.tar.bz2
+++ b/vendor-files.tar.bz2
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:16a440502ea2c66151c7d08a811ad998d3024afebfdb38fada6f8a6b86f726ad
-size 55342
+oid sha256:c8d0b20f971c0cb6ff101a998fb2763c1fc77d81cb2c80cb3f057f3757b738e7
+size 55321