diff --git a/.gitignore b/.gitignore
index ee85da5..d78226a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -60,3 +60,4 @@ samba-3.6.0pre1.tar.gz
 /samba-4.4.0rc1.tar.xz
 /samba-4.4.0rc2.tar.xz
 /samba-4.4.0rc3.tar.xz
+/samba-4.4.0rc4.tar.xz
diff --git a/samba.spec b/samba.spec
index f9c63e8..a5eea3c 100644
--- a/samba.spec
+++ b/samba.spec
@@ -6,7 +6,7 @@
 # ctdb is enabled by default, you can disable it with: --without clustering
 %bcond_without clustering
 
-%define main_release 6
+%define main_release 7
 
 %define samba_version 4.4.0
 %define talloc_version 2.1.5
@@ -14,7 +14,7 @@
 %define tevent_version 0.9.26
 %define ldb_version 1.1.25
 # This should be rc1 or nil
-%define pre_release rc3
+%define pre_release rc4
 
 %if "x%{?pre_release}" != "x"
 %define samba_release 0.%{main_release}.%{pre_release}%{?dist}
@@ -1970,6 +1970,10 @@ rm -rf %{buildroot}
 %endif # with_clustering_support
 
 %changelog
+* Tue Mar 08 2016 Guenther Deschner <gdeschner@redhat.com> - 4.4.0-0.7.rc4
+- Update to Samba 4.4.0rc4
+- resolves: #1315942 - CVE-2015-7560 Incorrect ACL get/set allowed on symlink path
+
 * Tue Feb 23 2016 Guenther Deschner <gdeschner@redhat.com> - 4.4.0-0.6.rc3
 - Update to Samba 4.4.0rc3
 
diff --git a/sources b/sources
index 9dca03a..22156f2 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-de0e8dceb75f0710a2cfe8fd211b614c  samba-4.4.0rc3.tar.xz
+a3a753d7b520020546699434469d3775  samba-4.4.0rc4.tar.xz