diff --git a/.gitignore b/.gitignore
index f60b64b..63456f2 100644
--- a/.gitignore
+++ b/.gitignore
@@ -73,3 +73,4 @@ samba-3.6.0pre1.tar.gz
 /samba-4.5.0.tar.xz
 /samba-4.5.1.tar.xz
 /samba-4.5.2.tar.xz
+/samba-4.5.3.tar.xz
diff --git a/samba.spec b/samba.spec
index 9dca4d4..7b2010a 100644
--- a/samba.spec
+++ b/samba.spec
@@ -8,7 +8,7 @@
 
 %define main_release 0
 
-%define samba_version 4.5.2
+%define samba_version 4.5.3
 %define talloc_version 2.1.8
 %define tdb_version 1.3.10
 %define tevent_version 0.9.29
@@ -658,7 +658,7 @@ and use CTDB instead.
 
 
 %prep
-%setup -q -n samba-%{version}%{pre_release}
+%autosetup -n samba-%{version}%{pre_release} -p1
 
 %build
 %global _talloc_lib ,talloc,pytalloc,pytalloc-util
@@ -1971,6 +1971,10 @@ rm -rf %{buildroot}
 %endif # with_clustering_support
 
 %changelog
+* Mon Dec 19 2016 Guenther Deschner <gdeschner@redhat.com> - 4.5.3-0
+- Update to Samba 4.5.3
+- resolves: #1405984 - CVE-2016-2123,CVE-2016-2125 and CVE-2016-2126
+
 * Wed Dec 07 2016 Guenther Deschner <gdeschner@redhat.com> - 4.5.2-0
 - Update to Samba 4.5.2
 
diff --git a/sources b/sources
index 3ab1416..bc13f74 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-f9a8dd36003474686e46aad62593f645  samba-4.5.2.tar.xz
+SHA512 (samba-4.5.3.tar.xz) = 5c073cff6206cdab290bbd58cc5cfa227d5f3cb38a8bcce41d862710845a7b5d9287219c366b3d4fdfc132fb11ef062484b45752a761bf0ed69ab0bcb2b40854