diff --git a/.gitignore b/.gitignore
index 66f28b9..0696950 100644
--- a/.gitignore
+++ b/.gitignore
@@ -235,3 +235,5 @@ samba-3.6.0pre1.tar.gz
 /samba-4.13.5.tar.asc
 /samba-4.13.6.tar.xz
 /samba-4.13.6.tar.asc
+/samba-4.13.7.tar.xz
+/samba-4.13.7.tar.asc
diff --git a/samba.spec b/samba.spec
index 5c4cc17..4161ea1 100644
--- a/samba.spec
+++ b/samba.spec
@@ -10,11 +10,11 @@
 
 %define main_release 0
 
-%define samba_version 4.13.6
-%define talloc_version 2.3.1
+%define samba_version 4.13.7
+%define talloc_version 2.3.2
 %define tdb_version 1.4.3
 %define tevent_version 0.10.2
-%define ldb_version 2.2.0
+%define ldb_version 2.3.0
 # This should be rc1 or nil
 %define pre_release %nil
 
@@ -3627,6 +3627,11 @@ fi
 %endif
 
 %changelog
+* Thu Mar 25 2021 Guenther Deschner <gdeschner@redhat.com> - 4.13.7-0
+- Update to Samba 4.13.7
+- related: #1941400, #1942496 - Security fixes for CVE-2020-27840
+- related: #1941402, #1942497 - Security fixes for CVE-2021-20277
+
 * Wed Mar 24 2021 Guenther Deschner <gdeschner@redhat.com> - 4.13.6-0
 - Update to Samba 4.13.6
 - resolves: #1941400, #1942496 - Security fixes for CVE-2020-27840
diff --git a/sources b/sources
index aaf65b2..e69c225 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (samba-4.13.6.tar.xz) = 1bb52ecfb7825e6583c23b47dd04e2c8bb59fcb7570815bb26aa782ae572f8fd54a4003c619a178c138fa9cfc761247e959bc67f24946a4d1f048169af2de442
-SHA512 (samba-4.13.6.tar.asc) = b1ba265b74840b18930adc159dc8b57266283ffc11bba63a03f5f177edc2086a7ae8a2e02329d52f9af880c874d25f1ffd0d3462fa1ada500c4a1a95af07adce
+SHA512 (samba-4.13.7.tar.xz) = 2e22370523c7ecee94b374f0950c91217fcbc5e087433ca7375eb6341b7132611c675b869bfa6d9c726d77a279f7a6c2bbeb30dcdd84dc77841b295eafe15557
+SHA512 (samba-4.13.7.tar.asc) = 1af3cdfde624ed93f44c368981b4d45ec6a78645a920e952e2b0965c78a1e515322cfd23199c93c38f50ebb85cfe0f6998ff59e50ac20e0f526276f762f917ed